3 ms·
Is this a security risk? It looks like a Spectre (as in: Reading other process memory) build in by design.
by sebazzz 9y ago
Is this a security risk? It looks like a Spectre (as in: Reading other process memory) build in by design.
- yjh0502 9y agoIt's a feature, just like strace or something.
- unmole 9y agoeBPF has a verifier to ensure that (Apart from other things) programs don't access memory they aren't supposed to.
- matthewmacleod 9y agoWorth noting though that one of the Spectre PoCs actually used eBPF in order to access kernel memory! Though of course, of the CPU were working correctly, this wouldn’t be a big deal.