#spectre
-
Spectre Returns: An Attack on Cloudflare Workers Siphons Off JWTs at 12 Bits per Second
Researchers have demonstrated a remote Spectre attack against Cloudflare Workers, extracting a JSON Web Token from a neighboring Worker in production — 360 times faster than the 2021 demonstration.
-
Interrupt Injection: A Precisely Timed Interrupt Slips Past Spectre v2 Defenses
MIT CSAIL researchers have shown that an unprivileged program on Linux can wedge itself into the gap between the moment the branch predictor is cleared and the moment the kernel uses it — re-“poisoning” it and bypassing the standard mitigations against Spectre v2.