xaera

@xaera@sh.itjust.works

• ⁨Comment⁩ on ⁨Technically Correct⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  Indeed. You can tell if it’s straight out of Googong Dam also.

• ⁨Comment⁩ on ⁨Intel 'Downfall': Severe flaw in billions of CPUs leaks passwords and much more⁩ ⁨⁨1⁩ ⁨year⁩ ago⁩:

  Seems very similar to Zenbleed in terms of using certain register optimisation and speculative execution to get crippling security exploits. Thus far I haven’t read too much into the detail of the attack but This article on Zenbleed, written by the attack’s author, describes how the attack in detail and how he came to find it using fuzzing techniques - in this case two sets of instructions that should have had the same result, but they didn’t.

• ⁨Comment⁩ on ⁨Intel 'Downfall': Severe flaw in billions of CPUs leaks passwords and much more⁩ ⁨⁨1⁩ ⁨year⁩ ago⁩:

  Here is a good write-up of Zenbleed for the Ryzen 2 and up vulnerability. It uses similar register optimisation and speculative execution to get the same effect.