3 ms·
"We note that iLeakage is a significantly difficult attack to orchestrate end-to-end, and requires advanced knowledge of browser-based side-channel attacks and
by ngneer 3y ago
"We note that iLeakage is a significantly difficult attack to orchestrate end-to-end, and requires advanced knowledge of browser-based side-channel attacks and Safari's implementation" - possibly the reason Apple is not losing sleep over this?
- BearOso 3y agoSo difficult to orchestrate that it's unfeasible, so there's effectively 0% risk involved. Yet another scary nickname and domain name for it says unprofessional and untrustworthy to me.
- saagarjha 3y agoThe sophistication of the authors in their paper speaks to the opposite. Give it a read!
- viraptor 3y agoIt's been shown possible, so: 1. There's a number of well funded agencies which would be happy to abuse it. They have both the skills and time to do it. 2. Showing that Spectre is possible on Intel created a steady stream of similar attacks. Other groups are likely already looking into it and may come up with much more feasible options.
- userbinator 3y agoThe security industry runs on fear, so that's not so surprising. IMHO if you're being targeted by a nation-state actor, or otherwise someone who knows enough about your hardware and software environment to be able to do something like this, there are far more important things to worry about. All these side-channels require a lot of setup and can be easily perturbed by other unpredictable sources of noise in the environment.
- worthless-trash 3y agoEh, If an average security programmer redneck like myself can abuse spectre and meltdown, I am pretty sure that some of the malware/ransomware can, they are not state sponsored but do have a financial incentive to do so. An attack vector is available, they'll abuse it if they can. Do you think I'm overestimating them ?