6 ms·
> RowHammer and the other speculative execution are really interesting attacks, but have they ever actually been used in the wild yet? It's a question I've bee
by hannob 3y ago
> RowHammer and the other speculative execution are really interesting attacks, but have they ever actually been used in the wild yet?
It's a question I've been asking myself for many highly publicized vulns. I once made this table:
https://github.com/hannob/vulns https://github.com/hannob/vulns
- taway1237 3y agoThanks for making this table, it's really interesting. But I'm not sure I fully understand the point it makes (if there is one). Most of the vulnerabilities absolutely had potential of abuse, but were not used in the wild because the vulnerability disclosure process actually worked as intended and they were promptly patched.
- fulafel 3y ago> not used in the wild because the vulnerability disclosure process actually worked This mental model kind of works for thinking about widespread exploitation but of course the vulnerabilities don't materialize when they are publicized, and most exploitations aren't publicly documented even if detected.