OSDev.org
https://forum.osdev.org/

Meltdown & Spectre – Intel, AMD and ARM CPUs vulnerable
https://forum.osdev.org/viewtopic.php?f=11&t=32660
Page 1 of 1

Author:  Roman [ Wed Jan 03, 2018 7:30 pm ]
Post subject:  Meltdown & Spectre – Intel, AMD and ARM CPUs vulnerable

That Intel-specific bug and now these cross-platform two... I just have no words.

https://meltdownattack.com
https://googleprojectzero.blogspot.com/ ... -side.html

Quote:
In addition to violating process isolation boundaries using native code, Spectre attacks can also be used to violate browser sandboxing, by mounting them via portable JavaScript code. We wrote a JavaScript program that successfully reads data from the address space of the browser process running it.

Author:  ~ [ Wed Jan 03, 2018 7:53 pm ]
Post subject:  Re: Meltdown & Spectre – Intel, AMD and ARM CPUs vulnerable

Roman wrote:
That Intel-specific bug and now these cross-platform two... I just have no words.

https://meltdownattack.com
https://googleprojectzero.blogspot.com/ ... -side.html

Quote:
In addition to violating process isolation boundaries using native code, Spectre attacks can also be used to violate browser sandboxing, by mounting them via portable JavaScript code. We wrote a JavaScript program that successfully reads data from the address space of the browser process running it.

Wouldn't it be enough to invalidate the entire cache every time we switch/enter/exit/terminate/create a process or thread? Or just disabling the CPU cache entirely for security-critical machines?

It seems to me that the intention is just having a cache that is separated for each process (instead of the existing one which is global to the CPU/computer) so there is no possibility to read leftover cached data between arbitrary processes.

Author:  iansjack [ Thu Jan 04, 2018 12:58 am ]
Post subject:  Re: Meltdown & Spectre – Intel, AMD and ARM CPUs vulnerable

Try that in your OS and see what happens. I'd expect a massive performance hit.

Author:  Solar [ Thu Jan 04, 2018 1:23 am ]
Post subject:  Re: Meltdown & Spectre – Intel, AMD and ARM CPUs vulnerable

It's a hot topic, but please try to keep it together.

http://forum.osdev.org/viewtopic.php?f=15&p=281534&sid=92537ce12633023afb3a3e41c9001aff#p281534

Author:  ggodw000 [ Sun Jan 07, 2018 3:57 am ]
Post subject:  Re: Meltdown & Spectre – Intel, AMD and ARM CPUs vulnerable

since this one is in ramblings, may be can be reserved for non-technical, political aspect of it.
The whole things looks like some publicity stunt.

Page 1 of 1 All times are UTC - 6 hours
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
http://www.phpbb.com/