Never miss a story

Get subscribed to our newsletter


×
Two variants of the attacks the team discovered can steal speculatively accessed information from Intel and AMD processors. Pixabay

An Indian-origin researcher has warned that billions of computers and other devices across the globe are vulnerable today owing to a vulnerability named ‘Spectre’ that was first discovered in 2018 but is open to hackers again. Since ‘Spectre’ was discovered, the world’s most talented computer scientists from industry and academia have worked on software patches and hardware defenses, confident they’ve been able to protect the most vulnerable points in the speculative execution process without slowing down computing speeds too much.

However, researchers, led by Ashish Venkat at the University of Virginia’s School of Engineering and Applied Science, UVA Engineering, discovered that computer processors are open to hackers again. They found a whole new way for hackers to exploit something called a “micro-op cache,” which speeds up computing by storing simple commands and allowing the processor to fetch them quickly and early in the speculative execution process.


Follow NewsGram on Facebook to stay updated.

Micro-op caches have been built into Intel computers manufactured since 2011. Venkat’s team discovered that hackers could steal data when a processor fetches commands from the micro-op cache. “Think about a hypothetical airport security scenario where TSA lets you in without checking your boarding pass because (1) it is fast and efficient, and (2) you will be checked for your boarding pass at the gate anyway,” Venkat said.


The difference with this attack is you take a much greater performance penalty than those previous attacks. Pixabay

A computers processor does something similar. It predicts that the check will pass and could let instructions into the pipeline. “Ultimately, if the prediction is incorrect, it will throw those instructions out of the pipeline, but this might be too late because those instructions could leave side-effects while waiting in the pipeline that an attacker could later exploit to infer secrets such as a password,” he elaborated.

Because all current ‘Spectre’ defenses protect the processor in a later stage of speculative execution, they are useless in the face of Venkat’s team’s new attacks. Two variants of the attacks the team discovered can steal speculatively accessed information from Intel and AMD processors. “Intel’s suggested defense against Spectre, which is called LFENCE, places sensitive code in a waiting area until the security checks are executed, and only then is the sensitive code allowed to execute,” Venkat informed.

ALSO READ: Cybersecurity: Remote Learning Software Prone To Hacking

“But it turns out the walls of this waiting area have ears, which our attack exploits. We show how an attacker can smuggle secrets through the micro-op cache by using it as a covert channel.” This newly discovered vulnerability will be much harder to fix. In the case of the previous ‘Spectre’ attacks, developers have come up with a relatively easy way to prevent any sort of attack without a major performance penalty for computing.

“The difference with this attack is you take a much greater performance penalty than those previous attacks,” said Ph.D. student Logan Moody. Venkat’s team has disclosed the vulnerability to the product security teams at Intel and AMD. The team’s paper has been accepted by the highly competitive International Symposium on Computer Architecture or ISCA. (IANS/JC)


Popular

Wikimedia Commons

The Centre on Wednesday directed all Union Ministries and Departments to clear Air India's dues immediately.

The Centre on Wednesday directed all Union Ministries and Departments to clear Air India's dues immediately. An office memorandum from the Finance Ministry's Department of Expenditure said: "Recently, the Government of India has decided to disinvest Air India, and the process of disinvestment of Air India and Air India Express is ongoing."

"Air India has stopped extending credit facilities on account of purchase of air tickets. Therefore, all Ministries or Departments are directed to clear Air India's dues immediately." "Air tickets from Air India may be purchased in cash till further instructions."



In 2009, the Centre had mandated that Central government officers travel via Air India for all official purposes including availing of LTC. On Monday, conglomerate Tata Group entered into a share purchase agreement with the Central government for buying out the latter's stake in national carrier Air India, Air India Express, and AISATS.

Keep Reading Show less
Pixabay

Sports betting has become increasingly popular among the youth in recent times

Sports betting has been around for centuries for the audience to not only watch the sport but to get more deeply involved in the match. It is a fun and often profitable activity for the viewer to win some extra fortune or simply get some extra sweat while watching the game. At first glance, sports betting may look like it's pure luck, but when you indulge deeper into the activity you realize it is more of a calculative and research activity than just pure luck. We must note that yes, luck does play a certain role to some extend but a win is not completely dependent on luck, if you're putting your bets on a certain team you have to make sure to do some research about the players on the team, history of wins and losses of the team and compare the probability of winning and then place bets.

Even though sports betting has existed since the ancient era, it was not until recently that it became increasingly popular among the youth. This happened due to the legalization of the activity and the rise of online sports betting. The technological revolution has expanded the sports betting industry, offering the bettors new markets and ways to bet. The only major difference between online bookmarkers and traditional brick-and-mortar venues of sports betting is that now you can place bets online from your mobile devices, laptops, computers etc.

Keep Reading Show less
File

The government of Assam has recently consented to translate the research-based book by- Shri Salil Gewali titled "Great Minds on India"

It is indeed good news that the book showcasing the wisdom of India in the eyes of Western intellectuals is getting due recognition and appreciation from other states and abroad. After Karnataka and Punjab, the Government of Assam has recently consented to translate the research-based book by Shillong-based author - Shri Salil Gewali titled "Great Minds on India". The Chief Minister of Assam - Shri Himanta Biswa Sarma was amazed to know that so many top western scientists and philosophers have drawn a considerable amount of inspiration from ancient scriptures of India, particularly in the studies of modern physics, linguistic and astronomy. In the recent meeting with the author, the Chief Minister had highly appreciated Gewali's book and promised to read it thoroughly. Gewali's book was also approved for translation in the year 2020 by the former Chief Minister – Shri Sarbananda Sonowal but due to COVID-19, the translation work was delayed.

Follow NewsGram on Facebook to stay updated.

Keep reading... Show less