4 ms·
It's really interesting to see this, as I've had concerns for a while now about keys getting read from memory (while helpful in incident response). Though I won
by kylemaxwell 15y ago
It's really interesting to see this, as I've had concerns for a while now about keys getting read from memory (while helpful in incident response). Though I wonder if sufficiently privileged processes might not be able to read those registers?
- tptacek 15y agoUserland processes can't directly read the debug registers.
- JoachimSchipper 15y agoAbsolutely. Then again, assuming that you can't get from root to kernel on a Linux box seems somewhat optimistic. Still a cool hack, though.