OSDev.org

The Place to Start for Operating System Developers
It is currently Thu Mar 28, 2024 11:36 am

All times are UTC - 6 hours




Post new topic Reply to topic  [ 5 posts ] 
Author Message
 Post subject: Meltdown & Spectre – Intel, AMD and ARM CPUs vulnerable
PostPosted: Wed Jan 03, 2018 7:30 pm 
Offline
Member
Member
User avatar

Joined: Thu Mar 27, 2014 3:57 am
Posts: 568
Location: Moscow, Russia
That Intel-specific bug and now these cross-platform two... I just have no words.

https://meltdownattack.com
https://googleprojectzero.blogspot.com/ ... -side.html

Quote:
In addition to violating process isolation boundaries using native code, Spectre attacks can also be used to violate browser sandboxing, by mounting them via portable JavaScript code. We wrote a JavaScript program that successfully reads data from the address space of the browser process running it.

_________________
"If you don't fail at least 90 percent of the time, you're not aiming high enough."
- Alan Kay


Top
 Profile  
 
 Post subject: Re: Meltdown & Spectre – Intel, AMD and ARM CPUs vulnerable
PostPosted: Wed Jan 03, 2018 7:53 pm 
Offline
Member
Member
User avatar

Joined: Tue Mar 06, 2007 11:17 am
Posts: 1225
Roman wrote:
That Intel-specific bug and now these cross-platform two... I just have no words.

https://meltdownattack.com
https://googleprojectzero.blogspot.com/ ... -side.html

Quote:
In addition to violating process isolation boundaries using native code, Spectre attacks can also be used to violate browser sandboxing, by mounting them via portable JavaScript code. We wrote a JavaScript program that successfully reads data from the address space of the browser process running it.

Wouldn't it be enough to invalidate the entire cache every time we switch/enter/exit/terminate/create a process or thread? Or just disabling the CPU cache entirely for security-critical machines?

It seems to me that the intention is just having a cache that is separated for each process (instead of the existing one which is global to the CPU/computer) so there is no possibility to read leftover cached data between arbitrary processes.

_________________
Live PC 1: Image Live PC 2: Image

YouTube:
http://youtube.com/@AltComp126/streams
http://youtube.com/@proyectos/streams

http://master.dl.sourceforge.net/projec ... 7z?viasf=1


Top
 Profile  
 
 Post subject: Re: Meltdown & Spectre – Intel, AMD and ARM CPUs vulnerable
PostPosted: Thu Jan 04, 2018 12:58 am 
Offline
Member
Member
User avatar

Joined: Sat Mar 31, 2012 3:07 am
Posts: 4591
Location: Chichester, UK
Try that in your OS and see what happens. I'd expect a massive performance hit.


Top
 Profile  
 
 Post subject: Re: Meltdown & Spectre – Intel, AMD and ARM CPUs vulnerable
PostPosted: Thu Jan 04, 2018 1:23 am 
Offline
Member
Member
User avatar

Joined: Thu Nov 16, 2006 12:01 pm
Posts: 7612
Location: Germany
It's a hot topic, but please try to keep it together.

http://forum.osdev.org/viewtopic.php?f=15&p=281534&sid=92537ce12633023afb3a3e41c9001aff#p281534

_________________
Every good solution is obvious once you've found it.


Top
 Profile  
 
 Post subject: Re: Meltdown & Spectre – Intel, AMD and ARM CPUs vulnerable
PostPosted: Sun Jan 07, 2018 3:57 am 
Offline
Member
Member

Joined: Wed Nov 18, 2015 3:04 pm
Posts: 396
Location: San Jose San Francisco Bay Area
since this one is in ramblings, may be can be reserved for non-technical, political aspect of it.
The whole things looks like some publicity stunt.

_________________
key takeaway after spending yrs on sw industry: big issue small because everyone jumps on it and fixes it. small issue is big since everyone ignores and it causes catastrophy later. #devilisinthedetails


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 5 posts ] 

All times are UTC - 6 hours


Who is online

Users browsing this forum: No registered users and 46 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group