Intel Processors Security Flaw
#1
A friend of mine just told me about this... It affects ALL intel processors (it's not clear if other brands are affected, see bellow). It is not known if this was abused in the wild but it is definitely a big concern. Some people even say it will affect the intel company heavily (sources even tell that the CEO sold most of his actions). 

[Image: shadow_fw_.png]

What the vulnerability is about:
Quote:The flaw - which reportedly affects processors in millions of computers - could allow applications, including JavaScript in a Web browser, to read protected areas of the kernel memory. 

The kernel is designed to separate "userland" from sensitive kernel areas "so that userland programs can't take over from the kernel itself and subvert security, for example by launching malware, stealing data, snooping on network traffic and messing with the hardware," wrote Sophos security analyst Paul Ducklin in a post today.
Source: https://www.darkreading.com/

[Image: shadow_fw_.png]

Are other brands affected?
What AMD says:
Quote:"AMD is not susceptible to all three variants," the company said to CNBC. "Due to differences in AMD's architecture, we believe there is a near-zero risk to AMD processors at this time."

However depending on the sources you search you can see that it's not totally true:
Quote:Three massive security flaws in Intel, AMD, ARM and other processors were disclosed Wednesday (Jan. 3). 
Source: https://www.tomsguide.com/

Quote:Which systems are affected by Spectre?
Almost every system is affected by Spectre: Desktops, Laptops, Cloud Servers, as well as Smartphones. More specifically, all modern processors capable of keeping many instructions in flight are potentially vulnerable. In particular, we have verified Spectre on Intel, AMD, and ARM processors.
Source: https://spectreattack.com

[Image: shadow_fw_.png]

They are based in two vulnerabilities: Spectre and Meltdown.
This is the main website, papers available in link: https://spectreattack.com
You can see a demo here:



Reply
#2
That attack really seems promising, I might try to check if my processor is vulnerable in a couple of weeks.
Thanks for sharing it enmafia!
Reply
#3
(01-05-2018, 12:13 PM)Hysteresis Wrote: That attack really seems promising, I might try to check if my processor is vulnerable in a couple of weeks.
Thanks for sharing it enmafia!

If you have an intel processor you are most definitely vulnerable, there are already some patches by some pieces of software and microsoft.
Good luck!
Reply