Collaborate Disseminate
I got the results of an internal pentest at my company and the job to fix it. The paper they gave me looked like the output i got from microsofts speculativecontrol powershell script from https://github.com/microsoft/SpeculationControl
Spe… Continue reading Spectre Mitigations Output for sucessful patch
Are the most modern CPUs still susceptible to attacks like Spectre and Meltdown?
Is it worth enabling the fixes in kernel (which hit performance) ?
Lets say high end laptop CPU such as the AMD Ryzen 7 7840U Processor.
Is it fully immune in… Continue reading are new CPUs still vulnerable to attacks like Spectre and Meltdown?
You need to turn on a special setting to stop (the code you wrote to stop [the code you wrote to improve performance] from reducing performance) from reducing security. Continue reading Zenbleed: How the quest for CPU performance could put your passwords at risk
I recently read that in the never ending series of speculative-execution flaws, unintended data written to extended registers ends up making secrets readable across privilege boundaries on AMD Zen 2 CPUs. This sounds like something I do no… Continue reading What mitigations exist for AMD vulnerability CVE-2023-20593 Zenbleed?
Last week we briefly mentioned a vulnerability in the Papercut software, and more details and a proof of concept have been published. The vulnerability is one known as session puzzling. …read more Continue reading This Week in Security: Session Puzzling, Session Keys, and Speculation
It’s been three years, but now researchers have disclosed new attacks on speculative execution in Intel and AMD chips.
The post Specter of Spectre is Back, in New Micro-Op Cache Vuln appeared first on Security Boulevard.
Continue reading Specter of Spectre is Back, in New Micro-Op Cache Vuln
For an old CPU, finding all the valid instructions wasn’t very hard. You simply tried them all. Sure, really old CPUs might make it hard to tell what the instruction …read more Continue reading Undocumented x86 Instructions Allow Microcode Access
If you have looked into this demo of Spectre in JavaScript: Did I get it right that only current site memory can be accessed, due to site isolation etc? I saw there is also an addon to detect attackts (Spectroscope). Can somebody describe … Continue reading What is the impact and threat of Spectre in Javascript?
Researchers have published frightening details on what they’re calling BlindSide, which relies on co-opting our old friend speculative execution.
The post BlindSide: Intel/AMD Speculation Bugs Under Microscope Again appeared first on Security Boulevar… Continue reading BlindSide: Intel/AMD Speculation Bugs Under Microscope Again
Intel chip features that were intended to help you do cryptography better could have leaked your inner secrets. Continue reading Intel patches chip flaw that could leak your cryptographic secrets