View Single Post
Old 08-15-2018, 09:23 AM  
rowan
Too lazy to set a custom title
 
Join Date: Mar 2002
Location: Australia
Posts: 17,393
Latest Intel security bug: if you use a VM, you're fucked

https://newsroom.intel.com/editorial...urity-threats/

Another cache related timing attack.

Other VM instances running on the same host can potentially read data from yours.

Even if you don't use a VM yourself, there's a good chance you use a third party service that does, so it could still affect you.

For example, I wonder how many cryptocurrency exchanges use DigitalOcean, Amazon AWS etc to scale? All those private keys, just sitting in memory........
rowan is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote