Apple chips can be hacked to leak secrets from Gmail, iCloud, and more

[trolololol@lemmy.world]

Yep sure that's the definition of a 0 day vulnerability, it was always there and suddenly someone found out.

What I'm saying is that I have a special interest in this topic and never heard of this problem for Arm before, and if some has more awareness than me I'd like to hear more from trusted sources.

[ozymandias117@lemmy.world]

Hardware. There's a load value predictor that guesses the value of a load from memory

https://predictors.fail/

[boonhet@lemm.ee]

I mean, Intel did it first and I do believe AMD and Qualcomm also followed suit.

[omegalemmy@discuss.online]

Oh no, not python!

[cellardoor@lemmy.world]

Take a look at ARM Morello and CHERI.

[fmstrat@lemmy.nowsci.com]

Fast for the benchmarks. "We'll make it slower and safer later."

[commandercloon@lemmy.ml]

You do realize this kind of attack first appeared on x86 hardware, right?

https://thehackernews.com/2024/10/new-research-reveals-spectre.html?m=1

[commandercloon@lemmy.ml]

We can laugh all we want but this issue was present on x86 hardware first

https://thehackernews.com/2024/10/new-research-reveals-spectre.html?m=1

[commandercloon@lemmy.ml]

Side channel attacks are as old as computing, and the specific CPU variants exploiting speculative execution have not simply occurred on 2018 hardware and stopped since; pretty much all CPU architecture is susceptible to some form of speculative execution exploit, Apple simply is not an exception to the rule, and I think it's unfair to call them out as somehow incompetent for making the same mistake as literally everyone

https://www.vusec.net/projects/ghostrace/

[john89@lemmy.ca]

Yes, I realize that.

You do realize that this kind of attack happened after spectre and meltdown? Apple knew of the risks, but decided to ignore them.

[john89@lemmy.ca]

Yes, and Apple decided to do the same thing knowing the risks.

"Intel did it!" is not a panacea for apple; it makes things worse for them.

[trolololol@lemmy.world]

That's a cool article, I had a quick read and will go back to it later.

Inter-Process Interrupt seems to be very cool, but the fact you have to start it exactly when a pointer in the kernel is created makes it a big hit and miss, and the fact one cpu is frozen during the process may make it easy to detect she counter.

I can and will call Apple many things such as unusually greedy, the new Microsoft that got big decade ago and have to buy companies to have new successful products, marketing brainwashing, cult and more. But not incompetent when it comes to M1.

M1 laptops performance is not due to what most people believe, and all the side channel attacks unique to it I've heard from, come from speculative memory address loads. It's pushing speculation in directions neither Intel nor AMD or Arm chips did before, and they're released in a time where side channel attacks are starting to be very l well understood.

I'm sure there was an engineer saying this was a bad idea, over ruled by a manager under the pressure of CFO to make it happen. So I blame this on greed.

[boonhet@lemm.ee]

You can't compete without doing it. Do you think Intel and AMD stopped doing it? Hell nah, people will find new exploits in a few years, I'm certain.

If you don't do speculative execution, you'll be left in the dust unfortunately.