4 ms·
Platypus: With Great Power Comes Great Leakage
- kanox 6y agoBefore people jump on the Intel-bashing bandwagon I'd like to point out that this is very similar to clkscrew for arm socs: https://www.usenix.org/system/files/conference/usenixsecurity17/sec17-tang.pdf https://www.usenix.org/system/files/conference/usenixsecurit... Frequency scaling and power measurement should have no visible effects on execution, but in practice they do. The solution is to limit control to these knobs and degrade sensors.
- itcrowd 6y agoEvery once in a while, these vulnerabilities get their own website, such as in this case. Is there a meta website that collects all of these websites? I'm interested because I would like to analyze these websites and see if I can find some heuristic or threshold for what constitutes enough impact to support the creation of such a vanity website (one of the earliest examples that I remember is heartbleed). Maybe there is some insight for me personally or, if I can find something, for a wider audience.