2 ms·
Having access to a PCI bus is a bit different than what we're talking about here. Explain to me how are you going to "quickly" walk a page table or other known
by icedchai 4y ago
Having access to a PCI bus is a bit different than what we're talking about here. Explain to me how are you going to "quickly" walk a page table or other known data structure if you don't have direct control over what you can read?
- ChrisLomont 4y agoTheir paper states "RETBLEED can leak arbitrary kernel data from an unprivileged process with all the mitigations up on various Intel and AMD systems." They control the branch target buffer so can point to whatever they want.
- icedchai 4y agoIt's still not going to be quick!
- ChrisLomont 4y agoDo you have experience in this? I do. What fraction of memory samples do you estimate you'd need to find structures of interest?
- icedchai 4y agoNot much! I've played around with the exploits / POC code posted on github.