3 ms·
[security noob here]can anyone explain this in layman terms, i.e can these be exploited remotely, what we can do to protect etc! In short, who should be worrie
by totaldude87 7y ago
[security noob here]can anyone explain this in layman terms, i.e can these be exploited remotely, what we can do to protect etc!
In short, who should be worried, a common Windows user, a *nix system admin or everyone who uses intel chips..
- saagarjha 7y agoThis vulnerability targets SGX enclaves (although I believe it would affect all memory loads?), which run code that is meant to be isolated from the rest of your computer and is probably currently only being used by DRM on your computer. This is a flaw in your processor and at the moment you probably cannot do anything to protect against this, although work is being done to come up with mitigations. Currently, it seems like they’ll be the kind that’ll slow down your computer.
- redrabbyte 7y agoit affects all loads, but for sgx the attacker scenario is that you have compromised the OS, which makes it significantly easier to create the conditions (faults/microcode assists) that cause the LVI than if you were just another userspace program (but it's not impossible there either)
- saagarjha 7y agoThough I don't have much knowledge of this area, I'm waiting for someone to make a PoC exploiting this from JavaScript ;)
- redrabbyte 7y agonot really / update / no, unless you rely on sgx to protect high value data