Reading privileged memory with a side-channel
googleprojectzero.blogspot.com
Reading privileged memory with a side-channel
1–10 of 639 posts
Re: Reading privileged memory with a side-channel
#2"These vulnerabilities affect many CPUs, including those from AMD, ARM, and Intel, as well as the devices and operating systems running them."
Curious. All other reports I've read state that AMD CPUs are not vulnerable.
Re: Reading privileged memory with a side-channel
#3"These vulnerabilities affect many CPUs, including those from AMD, ARM, and Intel, as well as the devices and operating systems running them." Curious. All other reports I've read state that AMD CPUs are not vulnerable.
yeah the intel response page is filled with people claiming intel is evil for even mentioning amd
Re: Reading privileged memory with a side-channel
#4"These vulnerabilities affect many CPUs, including those from AMD, ARM, and Intel, as well as the devices and operating systems running them." Curious. All other reports I've read state that AMD CPUs are not vulnerable.
Sounds like maybe SOME ARM and SOME AMD are implicated, especially since the Android ARM CPUs appear to be fine...
Re: Reading privileged memory with a side-channel
#5Wow, what a find for the Project Zero team. This team and idea can only be described as a success, well done.
Re: Reading privileged memory with a side-channel
#6"These vulnerabilities affect many CPUs, including those from AMD, ARM, and Intel, as well as the devices and operating systems running them." Curious. All other reports I've read state that AMD CPUs are not vulnerable.
We won't know until we have the full details. From the linux patches it looked like that AMD x86-64 processors were not affected.
But the sentence you quote adds AMD back into play. Maybe some of its ARM processors? e.g. AMD Opteron A1100?
Re: Reading privileged memory with a side-channel
#7"These vulnerabilities affect many CPUs, including those from AMD, ARM, and Intel, as well as the devices and operating systems running them." Curious. All other reports I've read state that AMD CPUs are not vulnerable.
Links to descriptions of similar vulnerabilities in AMD and ARM processors would be very welcome.
Re: Reading privileged memory with a side-channel
#8"These vulnerabilities affect many CPUs, including those from AMD, ARM, and Intel, as well as the devices and operating systems running them." Curious. All other reports I've read state that AMD CPUs are not vulnerable.
See the Twitter thread here: https://twitter.com/nicoleperlroth/status/948678006859591682
(Edit: there are 9 posts total, go to her user page to see them all)
Seems there are two issues. One, called Meltdown, only effects Intel and is REALLY bad, but the kernel page table changes everyone is making fixes it.
The other, dubbed Spectre, is apparently common to the way all processors handle speculative execution and is unfixable without new hardware.
I’d like to know more about that but I haven’t seen anything yet.
Whoever discovered this stuff on Google’s team deserves some sort of computer security Nobel prize.
Re: Reading privileged memory with a side-channel
#9"These vulnerabilities affect many CPUs, including those from AMD, ARM, and Intel, as well as the devices and operating systems running them." Curious. All other reports I've read state that AMD CPUs are not vulnerable.
You can find the details below. They've tried AMD CPUs also.
https://googleprojectzero.blogspot.com/2018/01/reading-privi...
Re: Reading privileged memory with a side-channel
#10"These vulnerabilities affect many CPUs, including those from AMD, ARM, and Intel, as well as the devices and operating systems running them." Curious. All other reports I've read state that AMD CPUs are not vulnerable.
And yet it also says that AMD devices running Android are not vulnerable.
I'd be curious how those two statements should be reconciled.