Reply to post:

Intel top brass smacked with sueball for keeping schtum about chip flaws

Anonymous Coward
Anonymous Coward

Don't confuse:

MELTDOWN: Ability to read kernel memory (or any other memory mapped into the virtual address space of the process) - Easy to do. Fixable at the cost of slowing down the machine. If you can read the kernel memory, you will probably find interesting stuff in there if you know where to look.

SPECTRE: Ability to read memory within the same process (that's the JavaScript thing, a POC can be found on YouTube) - Harder to exploit, depends on exactly what the CPU's pipeline is wired to do plus one needs a situation to exploit. Getting LastPass credentials from the browser process? Maybe.

More problems may surface as people are now looking closer at the whole side-channel-via-cache mess.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Biting the hand that feeds IT © 1998–2019