3 ms·
>Worth noting that many of the claims around Spectre are wholly un-demonstrated. This is untrue. https://googleprojectzero.blogspot.com/2018/01/reading-privil
by cthalupa 9y ago
>Worth noting that many of the claims around Spectre are wholly un-demonstrated.
This is untrue.
https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html https://googleprojectzero.blogspot.com/2018/01/reading-privi...
Variant 2 is Spectre.
"This section describes the theory behind our PoC for variant 2 that, when running with root privileges inside a KVM guest created using virt-manager on the Intel Haswell Xeon CPU, with a specific version of Debian's distro kernel running on the host, can read host kernel memory at a rate of around 1500 bytes/second."
- kllrnohj 9y agoNote that variant 2 of spectre has not been demonstrated on AMD and AMD claims to be unaffected ( http://www.amd.com/en/corporate/speculative-execution http://www.amd.com/en/corporate/speculative-execution ) However, the description of spectre from spectreattack.com is this: "Spectre breaks the isolation between different applications. It allows an attacker to trick error-free programs, which follow best practices, into leaking their secrets." That, however, is not demonstrated by any of these PoC, not that I can find.
- strongholdmedia 9y ago>>Worth noting that many of the claims around Spectre are wholly un-demonstrated. >This is untrue. Anything that is not demonstrated in a reproducible way (that is, some downloadable PoC code) is wholly un-demonstrated. To date, afaik, that goes for Spectre in whole.