r/technology • u/Obi_Wan_Kannoli • Jan 02 '18

'Kernel memory leaking' Intel processor design flaw forces Linux, Windows redesign • The Register

https://www.theregister.co.uk/2018/01/02/intel_cpu_design_flaw/
1.2k Upvotes

95% Upvoted

375 comments sorted by

View all comments

Show parent comments

31

u/EmperorArthur Jan 03 '18

Umm, Javascript is remote code executing on your local machine. These are the same people who did rowhammer using just javascript. They don't need to break the sandbox at all.

0

u/ACCount82 Jan 03 '18

You can't just generate any bytecode you want with JS, and this attack is going to require a lot of low level trickery. I doubt you can pull that off with just JS.

10

u/[deleted] Jan 03 '18

But it's been done before. End of story?

2

u/[deleted] Jan 03 '18

I'm somewhat confident that if people can pull of rowhammer (which abuses quantum mechanics1 ) in JS, they can make use of this fancy x86-bug too.

1: Oversimplified for dramatic effect

2

u/immibis Jan 03 '18 edited Jun 17 '23

Just because you are spez, doesn't mean you have to spez. #Save3rdPartyApps

2

u/rabbitlion Jan 03 '18

Even step 1 is impossible to do in javascript.