The Memory of a Meltdown
summary
Live PoC demonstrates that speculative execution and cache-timing side channels let user code read memory outside permissions: PoC pulls kernel data via cache timing and extracts a string placed in kernel space. Exploits include JavaScript-based Spectre proofs, Meltdown local privilege escalation and VM escape, and use tools like volatility for analysis. Mitigations require microcode/firmware and browser updates; affects Intel chips back to 1995 and many cloud providers push patches.
AI-written summary · about
chapters (8)
- 0:00Introduction and background
- 3:55Side-channel attacks explained
- 6:04Speculative execution basics
- 8:39Meltdown vulnerability details
- 13:20Exploiting Meltdown risks
- 14:25Mitigation strategies overview
- 18:44Demo and proof of concept
- 21:55Q&A and resources
related talks
50mPractical Ghostbusting: Meltdown, Spectre and You
23mMeltdown: Reading Kernel Memory from User Space
01h 01mTutorial: Side-Channel Attacks and Transient Execution Vulnerab...
01h 28m“Spectre: Secrets, Side-Channels, Sandboxes, and Security”
30mSpectre, Meltdown, & Linux
48mSpeculative execution vulnerabilities
51mExploiting Hardware Glitches And Side Channels In Perfect Software
51mKeynote |The Microarchitectures That I Saw And The Ones That I Hope To One Day See