undefined | Better HN

0 pointsAcen8y ago0 comments

Not any of the PoC. There are repositories around the internet building and working successfully though. E.g. Spectre exploit example https://github.com/ixtal23/spectreScope

0 comments

sehugg8y ago

FWIW, that PoC (reading user memory only) still works on 10.13.2 even after the patch is applied.

K0nserv8y ago

The KAISER[0] fix which is what has been patched by OSes for Meltdown only resolves full physical memory and kernel memory access. You can still use Meltdown techniques to read arbitrary memory in your process, but this seems expected.

0: https://en.wikipedia.org/wiki/Kernel_page-table_isolation

j / k navigate · click thread line to collapse

0 pointsAcen8y ago0 comments

Not any of the PoC. There are repositories around the internet building and working successfully though. E.g. Spectre exploit example https://github.com/ixtal23/spectreScope

0 comments

sehugg8y ago

FWIW, that PoC (reading user memory only) still works on 10.13.2 even after the patch is applied.

K0nserv8y ago

0: https://en.wikipedia.org/wiki/Kernel_page-table_isolation

j / k navigate · click thread line to collapse