2 ms·
Apple experts, how subtle is this constraint for this exploit? > The GoFetch attack uses the same user privileges as many other third-party macOS apps, rather
by heresie-dabord 3y ago
Apple experts, how subtle is this constraint for this exploit?
> The GoFetch attack uses the same user privileges as many other third-party macOS apps, rather than root access. This lowers the barrier to entry for actually run the attack, but it's not entirely the whole story.
> The GoFetch app running the attack must also be used on the same chip cluster as the cryptographic target app in order to function, and both must use the efficiency cores or the performance cores at the same time.
= = = edit for additional context
> The threat resides in the chips’ data memory-dependent prefetcher, a hardware optimization that predicts the memory addresses of data that running code is likely to access in the near future. [...] DMPs are a relatively new phenomenon found only in M-series chips and Intel's 13th-generation Raptor Lake microarchitecture
- deleted 3y ago[deleted]
- sliken 3y agoAdditionally the exploit is not present on the e-cores and the M3 allows turning off the speculation on a processes by process basis so encryption programs can safely just disable it.