/?pid=21141

Updated:05:55 AM EDT Mar 28


this is ggmania.com subsite NetCAT Vulnerability Exploits DDIO on Intel Xeon Processors to Steal D - TechAmok

NetCAT Vulnerability Exploits DDIO on Intel Xeon Processors to Steal D - [security]
09:33 AM EDT - Sep,11 2019 - post a comment

DDIO, or Direct Data I/O, is an Intel-exclusive performance enhancement that allows NICs to directly access a processor's L3 cache, completely bypassing the a server's RAM, to increase NIC performance and lower latencies. Cybersecurity researchers from the Vrije Universiteit Amsterdam and ETH Zurich, in a research paper published on Tuesday, have discovered a critical vulnerability with DDIO that allows compromised servers in a network to steal data from every other machine on its local network. This include the ability to obtain keystrokes and other sensitive data flowing through the memory of vulnerable servers. This effect is compounded in data centers that have not just DDIO, but also RDMA (remote direct memory access) enabled, in which a single server can compromise an entire network. RDMA is a key ingredient in shoring up performance in HPCs and supercomputing environments. Intel in its initial response asked customers to disable DDIO and RDMA on machines with access to untrusted networks, while it works on patches.

The NetCAT vulnerability spells big trouble for web hosting providers. If a hacker leases a server in a data-center with RDMA and DDIO enabled, they can compromise other customers' servers and steal their data. "While NetCAT is powerful even with only minimal assumptions, we believe that we have merely scratched the surface of possibilities for network-based cache attacks, and we expect similar attacks based on NetCAT in the future," the paper reads. We hope that our efforts caution processor vendors against exposing microarchitectural elements to peripherals without a thorough security design to prevent abuse." The team also published a video briefing the nature of NetCAT. AMD EPYC processors don't support DDIO.



Add your comment (free registrationrequired)

Short overview of recent news articles

Mar,28 2024 Intel's Battle Has Just Begun
Mar,27 2024 Unreal Physics is a new free game on Steam
Mar,27 2024 Is The World's Cheapest Hardware Wallet SafePal S1 Worth It?
Mar,27 2024 Yes, this was a Bad Idea (Emergency Wall-Mounted PC Build)
Mar,27 2024 11 Cool Command Line Programs You Need to See
Mar,26 2024 When you Accidentally Compromise every CPU on Earth
Mar,24 2024 Everyone Who Tried This Has FAILED - Khadas Mind Modular PC
Mar,24 2024 Air Cooling is Dead
Mar,24 2024 US Justice Dept. Sues Apple for Monopolistic Behavior in Smartphones
Mar,24 2024 Beetlejuice Beetlejuice - Official Teaser Trailer (2024) Michael
Mar,22 2024 Alien: Romulus | Teaser Trailer
Mar,22 2024 NVIDIA Is On a Different Planet
Mar,21 2024 Everyone Needs This and it's Under $10 - Handy Tech Under $100
Mar,21 2024 20 COOL GADGETS FOR 2024
Mar,21 2024 Nvidia's 5090 Is Built From WHAT?!
Mar,20 2024 Parasyte: The Grey | Official Trailer | Netflix
Mar,20 2024 Fastest m.2 on Planet EARTH | Crucial T705 Nvme Review
Mar,20 2024 LG's new 480Hz OLED dual-mode monitor
Mar,19 2024 First 9.1 GHz CPU (overclocked 14900KS)
Mar,18 2024 Haley Messick - Saatisfaction @bennybenassi - In10sive Mastercamp
Mar,18 2024 1000W CPU: The Most Powerful Desktop Processor
Mar,18 2024 Expands Snapdragon 8 Series to Cover More Price Points
Mar,17 2024 Train Vs Lamborghini
Mar,16 2024 Don't use a Microsoft Account!
Mar,16 2024 This Ghillie Made from MIRRORS is SHOCKINGLY GOOD
Mar,16 2024 How Hackers Deliver Malware to Hack you using Social Media
Mar,15 2024 Call of Duty: Warzone Mobile - Launch Trailer
Mar,14 2024 Intel's 4th Attempt At Beating Ryzen - "New" 6.2GHz Core
Mar,14 2024 Asus Goes Big with Zenfone 11 Ultra
Mar,14 2024 House Passes Bill to Force Sale of TikTok
Mar,14 2024 Motorola Brings More Affordable 5G Phones to its 2024 Lineup
Mar,14 2024 Capristan Swim - Miami Swim Week | Art Basel Miami
Mar,11 2024 The Most Stunning All SSD NAS Ever? Inside QNAP's All-SSD
Mar,11 2024 M2 vs M3 MacBook Air - ULTIMATE Comparison!
Mar,11 2024 Risky PC Experiment: Direct CPU Water-Cooling! Can It Survive?
Mar,11 2024 SpaceX Falcon 9 rocket launches 23 Starlink satellites from
Mar,10 2024 I tried the Cheapest Arduino Alternative (that Nobody heard of)
Mar,10 2024 This is the WEIRDEST PC I've ever seen.
Mar,10 2024 Nvidia Retires GTX 16 Series, GDDR7 Arrives, FSR Upscaling Going AI?
Mar,09 2024 The New BIOS Hack That Bypasses Every Antivirus
>> News Archive <<

TechAmok - Privacy Policy        loading time:0.01secs