3 ms·
More difficult since you can't execute CLFLUSH from there.
by yuhong 12y ago
More difficult since you can't execute CLFLUSH from there.
- Kenji 12y agoMaybe some JS commands trigger a CLFLUSH internally. I don't know, but it'd be "funny" if that exploit worked in JS.
- makomk 12y agoMaybe, though as they say it'd potentially be possible to cause a cache spill and attack it that way. I was looking at the associativity of various CPU caches with a vague eye to trying this in JavaScript a few days back and in theory it shouldn't take many reads to evict a cache line, so long as they're from the right addresses.