4 ms·
If it is so well known why has it taken 20 years to be discovered?
by apcragg 9y ago
If it is so well known why has it taken 20 years to be discovered?
- emn13 9y agoIt didn't take 20 years to be discovered; PoC's for variations on this theme were found over 10 years ago. The details really matter for making an exploit: so the amount of speculation and what gets speculated, how caches work, how good timing is (and how large the difference between cache and memory is) etc. Merely knowing that the combination of speculation, caching, and timing have the potential to break through memory protection barriers is a far from enough to actually exploit that weakness. For comparison: it was widely known that sha1 had weaknesses, yet it took many years for somebody to construct two pdfs that actually demonstrate a hash collision.
- tomxor 9y agoI don't know for sure but i'm guessing it's because this is all proprietary stuff, security researchers working on closed source hardware have to to a lot of inference... turn an already difficult theory into practice on an obscured implementation that is substantially harder to reverse engineer than compiled code.