3 ms·
How would one exploit a Google Cloud physical machine for example? One would still need to inject/patch a file to exploit processor right?
by dimillian 9y ago
How would one exploit a Google Cloud physical machine for example? One would still need to inject/patch a file to exploit processor right?
- DevNullDevice 9y agoMeltdown doesn't _directly_ allow modification of code. However, a guest VM could run userspace code that accesses ring 0 / kernel memory of the hypervisor / physical machine. This would mean that security certificates, passwords, etc of the hypervisor could be exposed, which could then allow compromise.
- levi_n 9y agoI would also assume this means exploits on a machine provisioned with multiple VMs from different customers would allow a malicious customer to leak data from another customer's VM located on the same machine.