what is the meltdown bug - amazon s3 · 2018. 1. 16. · what is the meltdown bug? @xtravirt...

1
What is the Meltdown bug? @xtravirt [email protected] Speculative Execution 5 things you should know about The Meltdown bug looks to gain access to where all your Wifi keys, passwords and other information is stored. These are kept under lock and key by the operating system. However during speculative execution, the CPU may cache some data and you can measure if something is there or not. If the CPU has the Meltdown bug then it can be forced to push usually protected data into the cache. Multiple CPU architectures are vulnerable to Meltdown, including Apple, ARM and Intel . Computer Program Computer Program added CPU Computer Program left the conversation Operating System Memory CPU Hey dude! How’d you get this number? Mate I don’t know you, so no, on lockdown Mad skillz m8 Dood you got the code for the wifi? CPU dude, hook a fella up with the wifi code **beep boop beep** oops... sorry #overwhelmed What is wifi? Haha! n00b Hey!? Haha! Here’s how a conversation should look between a computer program and the OS memory Computer Program Computer Program added CPU Computer Program added Meltdown Operating System Memory CPU Dude wifi code! CPU m8, you got the code for the wifi ..B.. ..C.. ..D.. Meltdown Stage 1: Does it start with A... Well thats a yes, on to stage 2.... Ummmm.... What? I didn’t say it was?! Narp! Dude!? But you didn’t say it wasn’t A conversation between a computer program and OS memory if the CPU has the Meltdown bug Another way of looking at this is, that by bombarding the CPU, it gets too busy to think regularly so it has to push things to cache to make thinking room. While cached, this information could be open to interrogation from malicious sources via a side channel. Patches are available to fix your devices, visit: https://xtravirt.com/cybersecurity/#spectre-meltdown to see the latest news and trusted patches for Meltdown and Spectre Help is at hand What is the Spectre bug?

Upload: others

Post on 13-Oct-2020

0 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: What is the Meltdown bug - Amazon S3 · 2018. 1. 16. · What is the Meltdown bug? @xtravirt info@xtravirt.com Speculative Execution 5 things you should know about The Meltdown bug

What is theMeltdownbug?

@xtravirt [email protected]

SpeculativeExecution

5 things you should know about

The Meltdown bug looks to gain access to where all your Wifi keys, passwords and other information is stored. These are kept under lock and key by the operating system. However during speculative execution, the CPU may cache some data and you can measure if something is there or not. If the CPU has the Meltdown bug then it can be forced to push usually protected data into the cache.

Multiple CPU architectures are vulnerable to Meltdown, including Apple, ARM and Intel.

Computer Program

Computer Program added CPU

Computer Program left the conversation

Operating System Memory

CPU

Hey dude!

How’d you get this number?

Mate I don’t know you,so no, on lockdown

Mad skillz m8

Dood you got the code for the wifi?

CPU dude, hook a fella up with the wifi code

**beep boop beep**

oops...sorry #overwhelmed

What is wifi?

Haha! n00b

Hey!?

Haha!

Here’s how a conversationshould look between a computerprogram and the OS memory

Computer Program

Computer Program added CPUComputer Program added Meltdown

Operating System Memory

CPU

Dude wifi code!

CPU m8, you got the code for the wifi

..B..

..C..

..D..

Meltdown

Stage 1: Does it start with A...

Well thats a yes, on tostage 2....

Ummmm....

What? I didn’t say it was?!

Narp!

Dude!?

But you didn’t say it wasn’t

A conversation between a computer program and OS memory if the CPU has the Meltdown bug

Another way of looking at this is, that by bombarding the CPU, it gets too busy to think regularly so it has to push things to cache to make thinking room. While cached, this information could be open to interrogation from malicious sources via a side channel.

Patches are available to fix your devices, visit:https://xtravirt.com/cybersecurity/#spectre-meltdown to see the latest news and trusted patches for Meltdown and Spectre

Help is at hand

What is theSpectre

bug?