2 ms·
> actually exploiting this without a cooperative target, and a relatively quiet machine is quite unlikely. ... until someone does it somewhat reliably. I alway
by vardump 7y ago
> actually exploiting this without a cooperative target, and a relatively quiet machine is quite unlikely.
... until someone does it somewhat reliably. I always assume my knowledge and imagination does not come close the collective creativity of exploiters.
- thr0w__4w4y 7y agoYes, this. Also, there is a saying in the security world, "Attacks only get better over time." I consult on embedded systems, and at least one medical device I work on is directly concerned with this issue. Embedded systems (cars, elevators, medical devices) consider a different threat model than, say, a server sitting in a data center. These poor devices often sit vulnerable, physically unprotected, and often they can be acquired on Ebay, etc. and "tortured in a garage" for months on end. Scary stuff. Good for me and my business, bad for all of us though.