Spectre

This article is based on my <a href="//pluralsight.pxf.io/c/1191769/424552/7490?subId1=solving&amp;u=https%3A%2F%2Fapp.pluralsight.com%2Fprofile%2Fauthor%2Fdavid-clinton" target="_blank">Linux Performance Monitoring and Tuning course on Pluralsight</a> which, by coincidence, was released just before news of Spectre and Meltdown broke.

Cleaning up after Spectre and Meltdown: figuring out how badly they slowed down your servers

In a <a href="//medium.com/revissolutions/spectre-meltdown-processor-vulnerabilities-what-you-need-to-know-587ebb37f2dc" target="_blank">previous post</a> we discussed the recently disclosed processor attacks called Spectre (<a href="//nvd.nist.gov/vuln/detail/CVE-2017-5753" target="_blank">CVE-2017–5753</a>, <a href="//nvd.nist.gov/vuln/detail/CVE-2017-5715" target="_blank">CVE-2017–5715</a>) &amp; Meltdown (<a href="//nvd.nist.gov/vuln/detail/CVE-2017-5754" target="_blank">CVE-2017–5754</a>). While we know that most of our readers are users of technology who simply want to be better at security (and aren’t interested in the technical), we also know that some of our readers enjoy going a bit deeper into the technical weeds. In this post we’ll highlight some of the key technical learning that comes from Spectre and and Meltdown.

Spectre & Meltdown Processor Vulnerabilities: A Technical Introduction

There’s never just one or two isolated, one-off flaws in complex computing products. Especially with a product as complex and widely used as Intel CPUs, once one <a href="//gzht888.com/tagged/security" target="_blank">security</a> vulnerability is exposed, many more will soon follow.

Spectre and Meltdown are just the beginning

At <a href="//criticalblue.com" target="_blank">CriticalBlue</a>, we’ve been discussing the newly disclosed Meltdown and Spectre flaws and their impact on <a href="//approov.io" target="_blank">device security</a>. Our CTO, Richard Taylor, wrote two blog posts giving a nice overview of the exploits and their likely impact on mobile device security. <a href="//gzht888.com/you-just-need-to-speculate-to-exfiltrate-a093a31aa904" target="_blank">Part 1</a> provides a clear explanation of the attacks and goes a little deeper than most. Part 2, focused on Android exploits, is included below to help get the word out.

The Spectre of the Zygote

<a href="//googleprojectzero.blogspot.com/" target="_blank">Google’s Project Zero</a> dropped a <a href="//googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html" target="_blank">bombshell</a> on the security community last week detailing CPU bugs affecting <a href="//newsroom.intel.com/wp-content/uploads/sites/11/2018/01/Intel-Analysis-of-Speculative-Execution-Side-Channels.pdf" target="_blank">Intel</a>, <a href="//www.amd.com/en/corporate/speculative-execution" target="_blank">AMD</a>, and <a href="//developer.arm.com/support/security-update" target="_blank">ARM</a> architectures going back as far as Pentium Pros. Yup, the chip with a mountain of cache and immortalized by Weird Al.

Exploiting Spectre with Deep learning

Over the last couple of days, two major vulnerabilities — Spectre and Meltdown — have surfaced. These vulnerabilities, which affect nearly all intel chips from the past decade, are two of the most — if not the most — dangerous vulnerabilities the IT world has ever seen.

Explain Spectre and Meltdown Like I’m 5

TL;DR: a PoC demonstrating <a href="//spectreattack.com/" target="_blank">Spectre</a>, the nasty CPU bug, running on Kubernetes.

Spectre-on-Kubernetes, a proof of concept

A coordinated disclosure overnight brought forth details of two large vulnerabilities affecting nearly all computer users worldwide. This comes after days of mounting speculation online following benchmarks of an unexplained bug fix reportedly causing performance losses of anywhere from 5 to 30% depending on the task at hand.

Meltdown and Spectre: what are they and what should I do?

Spectre is a cloud-based data platform to manage and monitor critical, production-grade data.

SPECTRE

spectredata.io

employees

Since 2021

COMPANY RANKING

SPECTRE

EVERGREEN INDEX #11939

Representing this company? Click here to claim and customize this page!

Read More Tech Stories Related to #Spectre

Spectre WIKI

Apply to get your Tech Company News Page live on gzht888.com today!

SPECTRE

spectredata.io

employees

Since 2021

COMPANY RANKING

SPECTRE

EVERGREEN INDEX #11939

RELATED COMPANIESRANK

HACKERNOON STORIES ON SPECTRE

Representing this company? Click here to claim and customize this page!

Read More Tech Stories Related to #Spectre

Spectre WIKI

Apply to get your Tech Company News Page live on gzht888.com today!