Your Web News in One Place

Help Webnuz

Referal links:

Sign up for GreenGeeks web hosting
November 14, 2018 12:00 pm PST

Researchers keep finding Spectre-style bugs in processors

In January 2018, researchers made a blockbuster announcement of seemingly unpatchable security bugs lurking in Intel processors; after a round of initial reassurances about the mitigations for these bugs, it became apparent that the reassurances were overblown, and active exploits were found in the field -- and then still-more bugs exploiting "speculative execution," started to pour out of the security research community.

This week, the original Spectre/Meltdown team revealed seven more of these speculative execution attacks, discovered through a systematic exploration of the potential uses of data obtained by trickery from different parts of the CPU that can be attacked in this way. Some of these attacks cannot be mitigated by any of the known mitigation techniques.

Processors rely on "speculative execution" for performance gains that compensate for a slowdown in gains from clockspeed, microlithography and other historic sources of processor improvement. Speculative execution uses statistical techniques to predict what instruction is likely to follow on from one received from the program, effectively guessing that if you run instruction X, the computer should start executing Y straightaway because that is likely to follow on. That guessing system is exploitable by attackers, who can use it to force processors into executing malicious code.

In the new research, these Meltdown variants are joined by a new one using Intel's "Protection Keys for Userspace" (PKU). Protection keys introduced with Skylake allow an application to mark pieces of memory with a four-bit key. Applications set the processor to use a particular protection key, and, during that time, attempts to access memory that is labeled with a different key will generate an error.

Read the rest


Original Link: http://feeds.boingboing.net/~r/boingboing/iBag/~3/r6-Koo8tCpc/mpx-pku.html

Share this article:    Share on Facebook
View Full Article