CPU bug wars update: the latest attack against AMD CPUs just leaks memory access patterns. This is basically inherent in how caches work. It's not even a speculation attack. Intel still has the lead in designing CPUs that give up all their secrets *by design* in speculation.
-
-
This attack can be used together with Spectre v1 (which is unpatchable in CPUs). The fix here is to add barriers to software where this matters. You can always use memory addressing as a side channel whenever you share memory; this is just one (efficient) way of doing it.
Show this thread -
AFAICT the main thing this new attack hurts is ASLR, but honestly, ASLR is becoming less and less relevant in the "you can run code on the target machine" scenario. Way too many side channels to choose from. This is just one of them. ASLR is just a mitigation, not security.
Show this thread
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.