4 ms·
Can someone knowledgeable on the topic comment if the general premise is sufficiently plausible that an attacker can access all browser memory in one process? H
by oezi 6y ago
Can someone knowledgeable on the topic comment if the general premise is sufficiently plausible that an attacker can access all browser memory in one process? Have Spectre-class attacks been observed in the wild?
- Tuna-Fish 6y agoIt takes an afternoon to build a proof of concept. It absolutely works.
- titzer 6y agoThis is the conclusion of our 2019 paper: https://arxiv.org/abs/1902.05178 https://arxiv.org/abs/1902.05178 Side-channel vulnerabilities are too numerous and too hard to defend against. In the limit, the entire process address space is up for grabs.