New flaw in Intel chips lets attackers slip their own data into secure enclave

Re:New flaw in Intel chips lets attackers slip their own dat... by saagarjha on Tuesday March 10, 2020 @04:17PM (#22539220)

This vulnerability targets SGX enclaves (although I believe it would affect all memory loads?), which run code that is meant to be isolated from the rest of your computer and is probably currently only being used by DRM on your computer. This is a flaw in your processor and at the moment you probably cannot do anything to protect against this, although work is being done to come up with mitigations. Currently, it seems like they’ll be the kind that’ll slow down your computer.

[ Parent | on HN ]

Re:New flaw in Intel chips lets attackers slip their own dat... by redrabbyte on Tuesday March 10, 2020 @06:04PM (#22540296)

it affects all loads, but for sgx the attacker scenario is that you have compromised the OS, which makes it significantly easier to create the conditions (faults/microcode assists) that cause the LVI than if you were just another userspace program (but it's not impossible there either)

[ Parent | on HN ]

Re:New flaw in Intel chips lets attackers slip their own dat... by saagarjha on Wednesday March 11, 2020 @02:05AM (#22543450)

Though I don't have much knowledge of this area, I'm waiting for someone to make a PoC exploiting this from JavaScript ;)

[ Parent | on HN ]