Re:Downfall Attacks
by H8crilA on Tuesday August 08, 2023 @04:30PM
(#37055063)
What about burstable instances on AWS, and whatever is the equivalent in other clouds? Hard to imagine those having a dedicated core, would probably defeat the purpose.
[ Parent
| on HN ]
Re:Downfall Attacks
by watermelon0 on Tuesday August 08, 2023 @04:52PM
(#37055289)
Not just burstable instances.
AWS Fargate, container as a service, allows specifying 0.25 or 0.5 CPU, and I would be surprised if those weren't shared.
Same probably? also applies to AWS Lambda.
My guess is there's likely less value in trying to target those kinds of environments... Just poking random data out of lambda or low end vps neighbors is a needle in a haystack the size of the moon in terms of finding anything useful.
It's more likely useful as part of a group of exploits to hit an individual, targeted system.
Re:Downfall Attacks
by TrapLord_Rhodo on Wednesday August 09, 2023 @06:58PM
(#37069518)
>Just poking random data out of lambda or low end vps neighbors is a needle in a haystack the size of the moon in terms of finding anything useful.
LLM's might change that. getting a firehouse of data and asking it to classify controls against NIST 53- rev5 produces interesting results.
Worse: by default it's not CPU but VCPU - a single core with multithreading = 2 VCPU