Exploiting Hardware Glitches And Side Channels In Perfect Software
summary
Demonstrates concrete, bug‑free attacks: uses Rowhammer bit flips from JavaScript to change pointers and gain code execution in modern browsers (Edge/Chakra), abuses memory deduplication address leak to discover code/data addresses, leverages that to compromise KVM clouds by corrupting SSH authorized_keys, and exposes riddle (MDS) line‑fill buffer leak that reads kernel, VM and enclave secrets on Intel CPUs since 2008; implements WebGL-based phone exploits and remote throwhammer; many proofs work but bounty payouts are negligible.
AI-written summary · about
chapters (8)
- 0:00The security research approach
- 2:36Hardware-level vulnerabilities
- 7:24Rowhammer and deduplication
- 12:25Browser exploitation
- 21:22Attacking cloud environments
- 27:05Mobile device exploits
- 30:59Remote and ECC attacks
- 33:48Riddle and future outlook
related talks
28mFlip Feng Shui: Hammering a Needle in the Software Stack
25mOne Bit Flips, One Cloud Flops: Cross-VM Row Hammer Attacks...
55mHow hacking works
28mComplexity Killed Security
25mThe Memory of a Meltdown
40mRowhammer Attacks: A Walkthrough Guide
24mThe Memory of a Meltdown
50mPractical Ghostbusting: Meltdown, Spectre and You