For questions regarding Spectre security vulnerability. Questions related to the CSS framework, Spectre.css, should use the [tag:spectre.css] tag.
Questions tagged [spectre]
53 questions
0
votes
1 answer
spectre css meters bug
with last browser update eg google chrome 94 version the spectre css meters aren't working anymore. Someone have idea to fix this bug?
thanks in advance.
CC
https://picturepan2.github.io/spectre/experimentals/meters.html
cafc
- 31
- 4
- 13
0
votes
0 answers
Why lowering the bandwidth of Spectre V1 attack disables the attack
I am doing some experiments with lowering the bandwidth of spectre to build evasive attack. However when I hit certain bandwidth there were no leakage. To lower the bandwidth I injected safe instruction that just read a certain address again and…
parisa
- 784
- 1
- 8
- 27
0
votes
0 answers
Melt-Down attack implementation in X86
Below code is part of meltdown attack and i could not understand what it is doing, can any one explain me what is below code is doing.
static void __attribute__((noinline))
speculate(unsigned long addr)
{
#ifdef __x86_64__
asm volatile (
…
alireza sadeghpour
- 649
- 6
- 20
0
votes
0 answers
Arm Cortex-A8 program flow prediction
I am examining ARM-Cortex A8 flow prediction abilities, in order to done this i implemented below code:
char SecretDispatcher[256 * 512];
int counter = 0;
//evicting SecretDispatcher from cache
...
while(counter < (512 * 9 + 1))
{
//evict…
alireza sadeghpour
- 649
- 6
- 20
0
votes
1 answer
Why branch predictor cannot be trained in another process.
In the Spectre variant 2, the branch target buffer (BTB) can be poisoned in another process. If the branch predictor is also using the virtual address to index the branch, why we can not train the branch predictor like training BTB in Spectre v1…
winter
- 51
- 4
0
votes
1 answer
Optimizing C++ code after Spectre/Meltdown kernel patches
So I recently read an article on The Register about the impact on pure computational stuff due to microcode updates for Spectre/Meltdown mitigation.
The linked paper specifies that this is for unoptimized code, which seems to imply that there are…
DeathByDenim
- 122
- 1
- 9
0
votes
1 answer
Digital Ocean droplet's console how to start services?
Digital Ocean rebooted all droplets 3 days ago but when they came back, my website was down.
Problem seems to arise because all related services (httpd, mysqld, iptables etc) are inactive and have to activate them again.
First of all did anybody…
Nikos Gkikas
- 251
- 2
- 5
-1
votes
1 answer
Spectre and Meltdown in ARM MPU embedded software
Consider the case of embedded systems based on ARM Cortex-A8 or M4 series CPU and the target OS an RTOS or embedded Linux. Do both Spectre and Meltdown impact such systems which never allow to install or execute external applications from user?…
Rga1
- 27
- 2