Collaborate Disseminate
I have a Laptop that needs replacing due to age.
I will be using this laptop for desktop use, including Office Apps, Development, Running VMs & Web Browsing. I will be using separation using Qubes/Xen, KVM or Virtualb… Continue reading Should I wait until Spectre and Meltdown is fixed in hardware?
I heard that Spectre could be used to reveal arbitrary information from RAM and I imagine it should ultimately be possible to automate getting root this way. At the same time, quite a couple of months passed since this class … Continue reading Why is there no spectre local root exploit in circulation?
Google has rolled out its newest browser version (Chrome 67.0.3396.62) for Windows, Mac and Linux this week with new security fixes and biometric features. Continue reading Google Patches 34 Browser Bugs in Chrome 67, Adds Spectre Fixes
The new hardware-based protections Intel announced earlier in March it was embedding into new chips will only protect against Spectre and Meltdown – but not the newly disclosed Variant 4, sources said. Continue reading Intel’s ‘Virtual Fences’ Spectre Fix Won’t Protect Against Variant 4
We use Web Application deployed on a CentOS server.
Can the attack will be performed via a browser?
Or the attacker need a physical access to the CentOS server?
I cannot understand the attack vector from the RHEL: https://a… Continue reading What is the attack vector for CVE-2018-3639 Speculative Store Bypass?
ok, so the gist of speculative store bypass attack to my understanding is that, cpu chooses the most frequent code path, bypass the if/else test and just assumes that it’s true/false and then execute it onwards. later if the … Continue reading Does Speculative Store Bypass Attack Require Assembly/Source Code Knowledge?
Yet another speculative execution side channel flaw has been disclosed in processors – and security experts warn that more may be out there. Continue reading Researchers Say More Spectre-Related CPU Flaws On Horizon
This week, now there’s a SECOND remote Rowhammer exploit, Chrome will remove secure indicator, Google offers free DDoS protection services, Intel is set to patch two new Meltdown/Spectre vulnerabilities, and more! Jason Wood from Paladin Security… Continue reading Red Hat, Google, iOmega, and University of Greenwich – Hack Naked News #174
Fortunately, existing fixes should provide the protection we need. Continue reading New speculative-execution vulnerability strikes AMD, ARM, and Intel
Intel on Monday acknowledged that its processors are vulnerable to another Spectre-like speculative execution side channel flaw that could allow attackers to access information. Continue reading Intel Responds to Spectre-Like Flaw In CPUs