3 ms·
Said interesting networking optimization is a gaping security home that has already been exploited in the wild.
by AstralStorm 7y ago
Said interesting networking optimization is a gaping security home that has already been exploited in the wild.
- dragontamer 7y agoFrom my understanding, that vulnerability exists only if RDMA is also enabled. RDMA, the ability to share RAM as if it were local RAM (through a memory-mapped IO mechanism) across Ethernet is not a common setup. The fact that you can perform cache-timing attacks over RDMA + Intel L3 cache is a testament to how efficient the system is if anything. Consider this interpretation: RDMA + DDIO is so fast, you can perform cache-timing attacks over Gigabit Ethernet(!!). NetCAT (the "vulnerability" you describe) is proof of it. Cache-timing / side channel attacks aren't exactly the kind of vulnerabilities that most people think of though. Its kinda cool, but its nothing as crazy as Meltdown / Spectre were.