Updated:03:06 PM EST Nov 15


this is ggmania.com subsite Intel discloses three more chip flaws - TechAmok

Intel discloses three more chip flaws - [security]
05:42 AM EDT - Aug,15 2018 - post a comment

Intel has disclosed a new set of security flaws collectively called the L1 Terminal Fault (L1TF). These flaws were discovered in conjunction with researchers at KU Leuven University and other universities. The researchers call their discoveries Foreshadow and Foreshadow - Next Generation (NG). Intel even suggests that disabling SMT might be applicable in some use cases when running virtualized operating systems.





Foreshadow

At a high level, SGX is a new feature in modern Intel CPUs which allows computers to protect users' data even if the entire system falls under the attacker's control. While it was previously believed that SGX is resilient to speculative execution attacks (such as Meltdown and Spectre), Foreshadow demonstrates how speculative execution can be exploited for reading the contents of SGX-protected memory as well as extracting the machine's private attestation key. Making things worse, due to SGX's privacy features, an attestation report cannot be linked to the identity of its signer. Thus, it only takes a single compromised SGX machine to erode trust in the entire SGX ecosystem.

Foreshadow - Next Generation (NG)

While investigating the vulnerability that causes Foreshadow, which Intel refers to as "L1 Terminal Fault", Intel identified two related attacks, which we call Foreshadow-NG. These attacks can potentially be used to read any information residing in the L1 cache, including information belonging to the System Management Mode (SMM), the Operating System's Kernel, or Hypervisor. Perhaps most devastating, Foreshadow-NG might also be used to read information stored in other virtual machines running on the same third-party cloud, presenting a risk to cloud infrastructure. Finally, in some cases, Foreshadow-NG might bypass previous mitigations against speculative execution attacks, including countermeasures to Meltdown and Spectre.



Add your comment (free registrationrequired)

Short overview of recent news articles

Nov,15 2018 ASUS ROG Maximus XI Formula Lightshow
Nov,15 2018 10,000 Zombies Vs Giant Blender
Nov,14 2018 Battlefield V: Official GeForce RTX Behind The Scenes Video
Nov,14 2018 Comcast to Refund $700,000 to Customers
Nov,14 2018 Google Turns On the Night for Pixel Phones
Nov,14 2018 Microsoft Rolls Out Refreshed Cortana App for iOS
Nov,14 2018 Bitcoin Falls to a One-Year Low
Nov,13 2018 NVIDIA GeForce 416.94 WHQL Drivers
Nov,13 2018 Windows 10 October Update Version 1809 re-released
Nov,13 2018 Intel i9-9980XE: Disappointing Overclocker, But Good Stock
Nov,13 2018 Apple Rolls Out iPhone X Display Replacement Program
Nov,13 2018 Intel Shows Off Its 5G Modem, Bound for Phones, PCs and More
Nov,13 2018 Eiza Gonzalez Is An Amazing Talent!
Nov,13 2018 Emily Ratajkowski In A Bikini Will Mess Your Brain
Nov,12 2018 Stan Lee Has Passed Away at the Age of 95
Nov,12 2018 Steam Bug Allowed Games to be Downloaded for Free
Nov,12 2018 Xbox Black Friday Deals Include Console Price Drop
Nov,11 2018 Mr Bean in Room 426 - Episode 8
>> News Archive <<

TechAmok - Privacy Policy        loading time:0.01secs