4 ms·
As someone who followed a course on all of this, this is indeed how we started out. 1. Read Flush + Reload 2. Then reproduce it in C 3. Then read Meltdown 4
by mettamage 2y ago
As someone who followed a course on all of this, this is indeed how we started out.
1. Read Flush + Reload
2. Then reproduce it in C
3. Then read Meltdown
4. Reproduce it in C
5. Read Spectre
6. Reproduce it in C
After that we had to implement a VUSEC paper. I chose GLitch [1].
[1] https://www.vusec.net/projects/glitch/ https://www.vusec.net/projects/glitch/
- sabas123 2y agoKeep in mind that getting meltdown to work might be very difficult depending on your setup. I wouldn't have been able to at least when starting out my teacher didn't provide us with targetable hardware. A spectre (particularly RSB-based ones) are nice to start out with imo.
- mettamage 2y agoYea fair, this is obviously a high level overview. I think I found with meltdown that I needed the assembly code. I also was able to reproduce it with actual C code if I recall correctly but that was way more finnicky.