Collaborate Disseminate
The past few days have been busy if you’re trying to keep up with the pace of computer security news. Between a serious Chromium bug that’s actively being exploited on Windows 7 systems, the NSA releasing one of their tools as an open source project, and a new Spectre-like speculative …read more
Continue reading Spoiler, Use-After-Free, and Ghidra: This Week in Computer Security
Panelists react to missing noted cryptographer Adi Shamir who was denied a visa to enter the US to attend RSA Conference 2019. Continue reading RSA Conference 2019: Cryptographers’ Panel Decries Adi Shamir’s Visa Issues
Raoul Strackx, one of the researchers who discovered the Foreshadow speculative execution vulnerability, talks at RSA about the Catch-22 issue when it comes to fixing speculative execution flaws. Continue reading RSAC 2019: Picking Apart the Foreshadow Attack
Researchers also devise a Spectre-like attack with no known mitigation. Continue reading Google: Software is never going to be able to fix Spectre-type bugs
This is code snippet of Meltdown assembly language code:
1. ; rcx = kernel address, rbx = probe array
2. xor rax, rax
3. retry:
4. mov al, byte [rcx]
5. shl rax, 0xc
6. jz retry
7. mov rbx, qword [rbx + rax]
Meltdown uses an ar… Continue reading Why must Meltdown use probe array?
Aidan takes a look back at 2018 and discusses some of the highlights from each month. It is interesting to me how I underrated some announcements which later became significant to Microsoft customers or to me.
The post An Azure Infrastructure Year in Review – 2018 appeared first on Petri.
Continue reading An Azure Infrastructure Year in Review – 2018
Over on the Cloudflare blog, [Marek] found himself wondering about computer memory, as we all sometimes do. Specifically, he pondered if he could detect the refresh of his SDRAM from within a running program. We’re probably not ruining the surprise by telling you that the answer is yes — with a little more than 100 lines of C and help from our old friend the Fast Fourier Transform (FFT), [Marek] was able to detect SDRAM refresh cycles every 7818.6 ns, lining right up with the expected result.
The “D” in SDRAM stands for dynamic, meaning that unless periodically refreshed by …read more
Continue reading Peering Into a Running Brain: SDRAM Refresh Analyzed from Userspace
The top cybersecurity and privacy trends that biggest impact in 2018. Continue reading Top 2018 Security and Privacy Stories
One of Intel’s fixes for the Spectre variant 2 chip flaw appears to have taken a big bite out of the performance of the latest Linux kernel. Continue reading Spectre mitigation guts Linux 4.20 performance
Systemic analysis reveals a range of new issues, and a need for new mitigations. Continue reading Spectre, Meltdown researchers unveil 7 more speculative execution attacks