3 ms·
Not any of the PoC. There are repositories around the internet building and working successfully though. E.g. Spectre exploit example https://github.com/ixtal23
by Acen 9y ago
Not any of the PoC. There are repositories around the internet building and working successfully though.
E.g. Spectre exploit example https://github.com/ixtal23/spectreScope https://github.com/ixtal23/spectreScope
- sehugg 9y agoFWIW, that PoC (reading user memory only) still works on 10.13.2 even after the patch is applied.
- K0nserv 9y agoThe KAISER[0] fix which is what has been patched by OSes for Meltdown only resolves full physical memory and kernel memory access. You can still use Meltdown techniques to read arbitrary memory in your process, but this seems expected. 0: https://en.wikipedia.org/wiki/Kernel_page-table_isolation https://en.wikipedia.org/wiki/Kernel_page-table_isolation