Back at the start of the year, a set of attacks that leveraged the speculative execution capabilities of modern high-performance processors was revealed. The attacks were named Meltdown and Spectre. Since then, numerous variants of these attacks have been devised. In tandem, a range of mitigation techniques has been created to enable at-risk software, operating systems, and hypervisor platforms to protect against these attacks.
A research team—including many of the original researchers behind Meltdown, Spectre, and the related Foreshadow and BranchScope attacks—has published a new paper disclosing yet more attacks in the Spectre and Meltdown families. The result? Seven new possible attacks. Some are mitigated by known mitigation techniques, but others are not. That means further work is required to safeguard vulnerable systems.
The previous investigations into these attacks has been a little ad hoc in nature; examining particular features of interest to provide, for example, a Spectre attack that can be performed remotely over a network, or Meltdown-esque attack to break into SGX enclaves. The new research is more systematic, looking at the underlying mechanisms behind both Meltdown and Spectre and running through all the different ways the speculative execution can be misdirected.
OK Google, what is African ISP Main One, and how did it manage to route your traffic into China through Russia?
Sub cable biz raises hand, 'fesses up to causing BGP hijack drama
Monday's prolonged Google cloud and websites outage was triggered by a botched network update by a West Africa telco, it is claimed.…
And here are all the places where you can watch it happen ...
Whether you're holiday shopping or just looking for a great deal, Black Friday is the best time to buy a new gaming console.
The moves come as the FDA has been cracking down on e-cigarette makers over concerns about underage users.
Federal prosecutors in Kansas announced Tuesday that a 25-year-old Californian has admitted that he caused a Wichita man to be killed at the hands of local police during a swatting attack late last year.
Swatting is a way to harass or threaten someone by calling in a false threat to law enforcement, and, when successful, it usually results in a police SWAT team showing up needlessly at its victim's house.
According to the United States Attorney's Office for the District of Kansas, Tyler Barriss pleaded guilty to making a false report resulting in a death, cyberstalking, and conspiracy. He also admitted that he was part of "dozens of similar crimes in which no one was injured."
Pedro Pascal is in talks to join The Mandalorian.
Artificial intelligence creates a computer generated video which manipulates the newsreader’s mouth.
Why face-mapping technology designed to improve TV dubbing is raising fears about fake news.
It's November 2018, and Microsoft's super-secure Edge browser can be pwned eight different ways by a web page
Look, we're tired of doing these headlines too, but for there's patching to do
Microsoft and Adobe have delivered the November edition of Patch Tuesday with another sizable bundle of security fixes to install as soon as you're able to.…
Whereas the DBX Concept was just a lifted Aston, this is a proper SUV.
The rise in hate crime incidents comes as social media companies are under scrutiny for their hate speech policies.
There are some deep discounts on unlocked phones and top models on all four major US carriers.
Or, buy at full price and pick up a $200 gift card.
The iPhone discounts are just getting underway.
We scoured Best Buy, Amazon, Target and Walmart for the best offers.
It also plans to build out eight other fast chargers in the near future.
Xilinx Alveo cards added to platform list
Liqid has added FPGAs to the list of compute resources its customers can use to compose workload-specific computing systems.…
He created hundreds of characters in 95 years on this planet. Here are some of our all-time personal favorites.
Those inspired by his work offer condolences and commemoration on Twitter.