Meltdown, Spectre: The password theft bugs at the heart of Intel CPUs

Meltdown, Spectre: The password theft bugs at the heart of Intel CPUs

6 years ago
Anonymous $1bh8zaeyQS

https://www.theregister.co.uk/2018/01/04/intel_amd_arm_cpu_vulnerability/

Summary The severe design flaw in Intel microprocessors that allows sensitive data, such as passwords and crypto-keys, to be stolen from memory is real – and its details have been revealed.

On Tuesday, we warned that a blueprint blunder in Intel's CPUs could allow applications, malware, and JavaScript running in web browsers, to obtain information they should not be allowed to access: the contents of the operating system kernel's private memory areas. These zones often contain files cached from disk, a view onto the machine's entire physical memory, and other secrets. This should be invisible to normal programs.