3 ms·
It's called Downfall, and the page about is at https://downfall.page/ https://downfall.page/ " [Q] How long was this vulberability under embargo? [A] Almost o
by sillywalk 3y ago
It's called Downfall, and the page about is at https://downfall.page/ https://downfall.page/
"
[Q] How long was this vulberability under embargo?
[A] Almost one year. I reported this vulnerability to Intel August 24, 2022.
"
[Q] How practical are these attacks?
[A] GDS is highly practical. It tooks me 2 weeks to develop an end-to-end attack stealing encryption keys from OpenSSL. It only requires the attacker and victim to share the same physical processor core, which frequently happens on modern-day computers, implementing preemptive multitasking and simultaneous multithreading.