OSDev.org https://forum.osdev.org/ |
|
Meltdown & Spectre – Intel, AMD and ARM CPUs vulnerable https://forum.osdev.org/viewtopic.php?f=11&t=32660 |
Page 1 of 1 |
Author: | Roman [ Wed Jan 03, 2018 7:30 pm ] |
Post subject: | Meltdown & Spectre – Intel, AMD and ARM CPUs vulnerable |
That Intel-specific bug and now these cross-platform two... I just have no words. https://meltdownattack.com https://googleprojectzero.blogspot.com/ ... -side.html Quote: In addition to violating process isolation boundaries using native code, Spectre attacks can also be used to violate browser sandboxing, by mounting them via portable JavaScript code. We wrote a JavaScript program that successfully reads data from the address space of the browser process running it.
|
Author: | ~ [ Wed Jan 03, 2018 7:53 pm ] |
Post subject: | Re: Meltdown & Spectre – Intel, AMD and ARM CPUs vulnerable |
Roman wrote: That Intel-specific bug and now these cross-platform two... I just have no words. https://meltdownattack.com https://googleprojectzero.blogspot.com/ ... -side.html Quote: In addition to violating process isolation boundaries using native code, Spectre attacks can also be used to violate browser sandboxing, by mounting them via portable JavaScript code. We wrote a JavaScript program that successfully reads data from the address space of the browser process running it. Wouldn't it be enough to invalidate the entire cache every time we switch/enter/exit/terminate/create a process or thread? Or just disabling the CPU cache entirely for security-critical machines? It seems to me that the intention is just having a cache that is separated for each process (instead of the existing one which is global to the CPU/computer) so there is no possibility to read leftover cached data between arbitrary processes. |
Author: | iansjack [ Thu Jan 04, 2018 12:58 am ] |
Post subject: | Re: Meltdown & Spectre – Intel, AMD and ARM CPUs vulnerable |
Try that in your OS and see what happens. I'd expect a massive performance hit. |
Author: | Solar [ Thu Jan 04, 2018 1:23 am ] |
Post subject: | Re: Meltdown & Spectre – Intel, AMD and ARM CPUs vulnerable |
It's a hot topic, but please try to keep it together. http://forum.osdev.org/viewtopic.php?f=15&p=281534&sid=92537ce12633023afb3a3e41c9001aff#p281534 |
Author: | ggodw000 [ Sun Jan 07, 2018 3:57 am ] |
Post subject: | Re: Meltdown & Spectre – Intel, AMD and ARM CPUs vulnerable |
since this one is in ramblings, may be can be reserved for non-technical, political aspect of it. The whole things looks like some publicity stunt. |
Page 1 of 1 | All times are UTC - 6 hours |
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group http://www.phpbb.com/ |