3 ms·
A lot of people here commenting about shared hosting in clouds, but I don't see any actual text that shared environments are more vulnerable. It sounds like a
by phamilton 4y ago
A lot of people here commenting about shared hosting in clouds, but I don't see any actual text that shared environments are more vulnerable.
It sounds like a black box timing attack that could target my laptop, my phone, my server, anything that does cpu frequency scaling and is performing a computation that is susceptible to this attack.
Is that accurate?
- rocqua 4y agoShared hosting is where an attack like this is most useful. Because you don't need remote code execution on a (virtual) machine. You just need to happen to be colocated with it. For RCE on a laptop, server, phone, etc. You just need privilege escalation to get equivalent access, which tends to be easy.
- mastax 4y agoYour devices probably aren't responding to unsolicited network requests from the internet.
- phamilton 4y agoBut they do run arbitrary javascript code in my browser.