The Memory of a Meltdown
summary
Demonstrates working proof-of-concept exploit of Meltdown/Spectre that uses flush+reload cache timing to leak privileged memory, including kernel pages and browser secrets; shows a live POC that reads a short secret string from kernel-addressed space and discusses JavaScript-based Spectre attacks against browsers. Covers mitigation status: microcode/firmware updates for Intel, ARM advisories, staggered AMD patches, and browser updates (Chrome 64+, Firefox 57+). Mentions using volatility for dumped memory analysis and explains variant differences and why binary recompilation is the hardest patch.
AI-written summary · about
chapters (17)
- 0:00Introduction and welcome
- 1:01Speaker introduction and background
- 4:15Side-channel attacks and cache basics
- 6:46Speculative and out-of-order execution
- 8:52Spectre vulnerabilities explained
- 9:57Meltdown attack details
- 11:22Affected systems and history
- 12:50Browser and memory leaks
- 13:57Exploiting Meltdown for privilege escalation
- 15:01Mitigation efforts by cloud providers
- 16:54Vendor security bulletins and updates
- 17:58Browser and software mitigation
- 18:45Processor-specific fixes
- 19:58Live demonstration attempt
- 21:53POC limitations and learning process
- 22:58Demonstration of cache-based secret extraction
- 24:06Closing remarks and resources
related talks
50mPractical Ghostbusting: Meltdown, Spectre and You
23mMeltdown: Reading Kernel Memory from User Space
01h 01mTutorial: Side-Channel Attacks and Transient Execution Vulnerab...
30mSpectre, Meltdown, & Linux
51mExploiting Hardware Glitches And Side Channels In Perfect Software
01h 28m“Spectre: Secrets, Side-Channels, Sandboxes, and Security”
51mKeynote |The Microarchitectures That I Saw And The Ones That I Hope To One Day See
48mSpeculative execution vulnerabilities