5 ms·
I've assumed since the exploits were published that viable attacks existed to exploit them. Does that make me too cynical? Of what advantage is it for attacker
by lukeqsee 9y ago
I've assumed since the exploits were published that viable attacks existed to exploit them. Does that make me too cynical?
Of what advantage is it for attackers to publish that they are using a particular exploit? Especially due to the nature of these exploits, they would more than likely be silent attacks.
- scarmig 9y agoI've assumed since before the exploits were published that viable attacks existed to exploit them. Does that make me too cynical?
- saget 9y agoYeah, the white papers are pretty clear on how to replicate it, though it seemed it would still take no small effort to get it working at a higher level (IIRC they used kernel modules to pull it off). Here's the meltdown repo from the paper if your interested: https://github.com/IAIK/meltdown https://github.com/IAIK/meltdown