Exorcising Spectre needs a new angle

Stefan Mileschin · 25th February 2019, 10:12

CPUs need to be overhauled not software fixes

Google researchers have warned that it will be challenging to avoid Spectre bugs unless CPUs are dramatically overhauled.

According to Silcon Republic the researchers, Ross McIlroy, Jaroslav Sevcik, Tobias Tebbi, Ben L Titzer and Toon Verwaest, work on Chrome’s V8 JavaScript engine and have penned a paper distributed through ArXiv.

It concludes that all processors that perform speculative execution will always remain susceptible to various side-channel attacks, despite mitigations that may be discovered in future.

It is just over a year since the Meltdown and Spectre flaws were first disclosed. Spectre is a hardware vulnerability that affects microprocessors that can potentially be exploited by malware, which can infiltrate data being processed by the CPU.

Researchers found that a malicious programme can exploit the Spectre vulnerability to steal confidential data stored in the memory of other programmes being executed.

Spectre “can enable a website to read data stored in the browser for another website, or even the browser’s memory itself”.

https://fudzilla.com/news/pc-hardwar...ds-a-new-angle

25th February 2019, 10:12	#1
Stefan Mileschin [M] Reviewer Join Date: May 2010 Location: Romania Posts: 153,541	Exorcising Spectre needs a new angle CPUs need to be overhauled not software fixes Google researchers have warned that it will be challenging to avoid Spectre bugs unless CPUs are dramatically overhauled. According to Silcon Republic the researchers, Ross McIlroy, Jaroslav Sevcik, Tobias Tebbi, Ben L Titzer and Toon Verwaest, work on Chrome’s V8 JavaScript engine and have penned a paper distributed through ArXiv. It concludes that all processors that perform speculative execution will always remain susceptible to various side-channel attacks, despite mitigations that may be discovered in future. It is just over a year since the Meltdown and Spectre flaws were first disclosed. Spectre is a hardware vulnerability that affects microprocessors that can potentially be exploited by malware, which can infiltrate data being processed by the CPU. Researchers found that a malicious programme can exploit the Spectre vulnerability to steal confidential data stored in the memory of other programmes being executed. Spectre “can enable a website to read data stored in the browser for another website, or even the browser’s memory itself”. https://fudzilla.com/news/pc-hardwar...ds-a-new-angle

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
LG G6 leaked from every angle	Stefan Mileschin	WebNews	0	6th February 2017 06:34
This is most likely how the ‘slightly curved’ LG G4 will look from every angle	Stefan Mileschin	WebNews	0	12th March 2015 08:26
LG G3 pictured from every angle, Quad HD display and 3 GB RAM ‘confirmed’	Stefan Mileschin	WebNews	0	5th May 2014 08:23
HTC's next One leaks again in all-angle photo shoot	Stefan Mileschin	WebNews	0	11th March 2014 07:54
Xigmatek Talon review: a new angle	Stefan Mileschin	WebNews	0	11th March 2013 07:50
Scythe Kama Angle Heatsink Review	jmke	WebNews	0	27th April 2009 11:46
Scythe Kama Angle CPU Cooler	jmke	WebNews	0	25th February 2009 09:30
Scythe Kama Angle CPU Cooler Review	jmke	WebNews	0	13th February 2009 15:18
Scythe introduces the Kama Angle CPU-Cooler	jmke	WebNews	0	25th October 2008 22:48
A View from another angle from our beloved friends	Sidney	General Madness - System Building Advice	2	4th March 2005 16:22