3 ms·
Very cool and scary, but in reality actually exploiting this without a cooperative target, and a relatively quiet machine is quite unlikely. Does not mean it sh
by dmitrygr 7y ago
Very cool and scary, but in reality actually exploiting this without a cooperative target, and a relatively quiet machine is quite unlikely. Does not mean it shouldn't be looked at, but do not lose sleep over it.
- vardump 7y ago> actually exploiting this without a cooperative target, and a relatively quiet machine is quite unlikely. ... until someone does it somewhat reliably. I always assume my knowledge and imagination does not come close the collective creativity of exploiters.
- thr0w__4w4y 7y agoYes, this. Also, there is a saying in the security world, "Attacks only get better over time." I consult on embedded systems, and at least one medical device I work on is directly concerned with this issue. Embedded systems (cars, elevators, medical devices) consider a different threat model than, say, a server sitting in a data center. These poor devices often sit vulnerable, physically unprotected, and often they can be acquired on Ebay, etc. and "tortured in a garage" for months on end. Scary stuff. Good for me and my business, bad for all of us though.