4 ms·
A bit off topic but I asked the same issue in a thread that got delisted as [dupe] so I'm reposting here so hopefully someone can enlighten me: I've been readi
by saganus 9y ago
A bit off topic but I asked the same issue in a thread that got delisted as [dupe] so I'm reposting here so hopefully someone can enlighten me:
I've been reading up a bit on these attacks and I was wondering if there are any particular requirements to implement them in an arbitrary language?
For example, can you implement the attack with Java but without JNI? i.e. are syscalls required to be able to leverage the exploit?
- talyian 9y agothe requirements are easy to meet - you just need to be able to time operations at a suitable precision. The exploits are possible in Javascript running in a browser.
- saganus 9y agoYeah, I saw the PoC in the Spectre paper, but I was wondering if a JVM language could meet those reqs. I have absolutely no idea if using the JVM would for example, mess with the required precision since I'm guessing one would need to use JNI/JNA to get the timing and that could maybe not be suitable?
- peoplewindow 9y agoJava provides access to high resolution timers without JNI and optimises them very well.