26 ms·
> If you have a process running on your machine can it use this to get root? Read Keys? Which keys? OpenBSD / OpenSSH for example does now (since 2019?) encry
by TacticalCoder 5y ago
> If you have a process running on your machine can it use this to get root? Read Keys?
Which keys? OpenBSD / OpenSSH for example does now (since 2019?) encrypt SSH keys in RAM to prevent rowhammer like attacks. They're mixing the key with a huge "pre key" and an attacker would need to side-channel attack the entire pre key to be able to read the real SSH keys.
So it's not as if there was nothing that could be done to guard against this.
It may require changing lots of software/libraries but at least the security-conscious ones already started, without waiting for this "blacksmith" attack.