4 ms·

There is no such thing as practical form of these exploits. We have yet to see a real world demonstration even though everybody keeps saying how theoretically e

There is no such thing as practical form of these exploits. We have yet to see a real world demonstration even though everybody keeps saying how theoretically easy it is.

shakna 9y ago
https://github.com/gkaindl/meltdown-poc https://github.com/gkaindl/meltdown-poc
- jnordwick 9y ago
  Poc in the url means proof of concept. Not very Real world at all. Not some artificial poc that already knows an address to attack and needs to be helped by continually pulling the data into the L1 cache. If it is so easy to do then why has nobody written anything that can read a password from a browser or sudo?
  - ryanlol 9y ago
    You seem to think that exploit devs should work for free, why is that?
  - shakna 9y ago
    A proof of concept is a real world demonstration. That's all it is.