
how-to block ads
|
 Steve I'm a PC, so shut up Consultant join:2001-03-10 Yorba Linda, CA
| Re: "HyperThreading considered harmful" said by novaflare : Example run a java app on web site that stays active. No way.
I think this is beyond the pale of what one can do. I think it's going to be impossible for a Java application to do this, because aside from the fact that it doesn't have access to the CPU instructions required to do this kind of hyper-highresolution timing, Java has so much overhead that it's going to confound any efforts at measuring these timing differences.But getting a buffer over run is similar to a hardware security flaw realy. Hmmm, did you actually read the paper?
There is no circumstance where thread #1 can read or write data cached by thread #2 - it can only make some guesses about which memory thread #2 is accessing. This revolves around subtle timing issues, not modifying memory.
Steve -- Stephen J. Friedl Unix Wizard Microsoft Security MVP Tustin, California USA my web site | |
|   novaflare The Dragon Was Here Premium join:2002-01-24 Barberton, OH
| Re: "HyperThreading considered harmful" just used as a example. It how ever is probably possible to do so with spyware torjans or other apps you could trick the user in to downloading. And i only read part of it. Before posting reading more now. Ither way intel needs to take serious action to correct it. -- DSLR security chat at us.ausirc.net chanel #dslr_sec lets pack this channelopen source dns server for *nix and windows »powerdns.com | |
|   BeesTea Network Janitor Premium,VIP join:2003-03-08 00000
| said by Steve :No way. I think this is beyond the pale of what one can do. I think it's going to be impossible for a Java application to do this, Ditto. -- $ /bin/whoami nobody | |
|   Marilla I Am My Own Arbiter Premium join:2002-12-06 Belpre, OH
| said by Steve :There is no circumstance where thread #1 can read or write data cached by thread #2 - it can only make some guesses about which memory thread #2 is accessing. This revolves around subtle timing issues, not modifying memory. Hence, my interest, and my headache! -- Windows, Mac, Linux, BSD - just use the right tool for the right job... end the OS Politics! | |
|  | |  |
|