4 ms·
Exactly what I wonder too. Can't the fix be used as an attack vector. At least infer disruptions to trigger timeout events, add execution time variance. And wo
by JoachimS 6y ago
Exactly what I wonder too. Can't the fix be used as an attack vector. At least infer disruptions to trigger timeout events, add execution time variance.
And wouldn't you be able to detect RdRand instruction execution for (for example) key generation. Pinpointing when processes perform sensitive operations.
And, would it be possible to use RdRand execution as a time based exfiltration channel? Run a timing loop in one process on one core. Use RdRand reading with different frequency in a second process to (using morse code or similar) to encode information. The first process use its timing loop to recover the information.
- deleted 6y ago[deleted]