Leaking /etc./shadow from userspace by manipulating Intel branch predictors [pdf]

Comments (1)

WJW · 6h ago

Super wild hack. Because the branch predictor tables are updated asynchronously, you can SYSCALL into the kernel and get it to speculatively load privileged memory. Then afterwards it is possible to leak this memory by using already known SPECTRE type attacks and use that information to extract arbitrary memory, like the contents of /etc/shadow. This is pretty magical.

Projection Connections: A Nerdy Poster (somethingaboutmaps.wordpress.com)

One Driver, Two Trucks: Is This the Future of Freight? (spectrum.ieee.org)

Scrape once, cache, and share from then on (blat.ai)

Suspected InfoStealer Malware Data Breach Exposed 184M Logins/Passwords (websiteplanet.com)

Virtual flames feel 'real' in Augmented Reality (ieeexplore.ieee.org)

Celebrate Java's 30th Birthday (dev.java)

Update from Dianna [video] (youtube.com)

Open-Source Runtime for Scalable AI Agent Deployment with Ray and FastAPI (kodosumi.io)

D-Wave Announces General Availability of Advantage2 Quantum Computer (businesswire.com)

Ship AI-generated code with confidence (vybecheck.io)

Show HN: ScrollSnap – Open-Source macOS App for Scrolling Screenshots in Swift (github.com)

The future is made out of energy (orcasciences.com)

Scaling Instagram's Recommendation System (engineering.fb.com)

Never-before-seen 'extreme' microbes surrounded NASA robot (livescience.com)

Next Password Could Be Stored in Plastic (spectrum.ieee.org)

Sublime Text Build 4200 and Future Plugin Changes (sublimetext.com)

3 Years into Foldables (berti92.github.io)

Agent Memory in Portia AI's Open-Source Agent Framework (blog.portialabs.ai)

Cybersecurity Forecast 2025 [pdf] (gstatic.com)

KotlinConf 2025 is a real bowl of fresh air for back end devs (lengrand.fr)

U.S. Spy Agencies–One-Stop Shop to Buy Your Personal Data (theintercept.com)

Violating memory safety with Haskell's value restriction (welltypedwit.ch)

Too Much Grit Can Damage Your Brain (inc.com)

Datadog opens sources a SOTA time series model and 350M point benchmark (datadoghq.com)

Show HN: Kompose - tool to help docker-compose users move to Kubernetes (github.com)

We sold our first AI agent to a legacy industry–now we're stuck. Help us Advice?

Show HN: TripJam – Plan Trips with Friends Using AI and Real-Time Map/Itinerary (tripjam.app)

Ask HN: What do you wish you had done differently in life?

The Epic Rise and Fall of a Dark-Web Psychedelics Kingpin (wired.com)

Russia to enforce location tracking app on all foreigners in Moscow (bleepingcomputer.com)

Show HN: BrandInAMinute – AI tool to generate a full brandkit in under a minute (brandinaminute.com)

Show HN: AI summarizer for any content on mobile (askorca.ai)

Dynamically Adapting to Application Sizes (maoni0.medium.com)

ChatGPT is shockingly bad at poker (natesilver.net)

AI scam factories force trafficked workers to defraud global victims (restofworld.org)

Can AI detect brilliance instead of just toxicity? (github.com)

Show HN: I built an interactive website to practice English at your own pace (speekery.com)

Show HN: VibeSpec – A tool to generate structured specs for Spec2Code (vibespec.guaeca.com)

Project Sid: Many-Agent Simulations Toward AI Civilization (2024) (arxiv.org)

Show HN: Infinite Hagakure (hagakure.space)

China's $10 EV Battery Could Upend the US Auto Market (autoblog.com)

Collaboration among scholars and practitioners in Western martial arts (wiktenauer.com)

Experimental Quantum Communications Network (rit.edu)

Tesla crushed in Europe as BYD outsells; BEV sales surge 28% (arstechnica.com)

Wiki Patterns (wikipatterns.haz.wiki)

AirPods Are Still Untouchable as Apple Crushes the Competition in 2025 (macrumors.com)

Poll: Agentic AI IDE/tool that you recommend?

How to Build a Speech-Jamming Gun (technologyreview.com)

The hidden threats of residential IPs (tirreno.com)

Show HN: 8-Bit Spelling Game I Built for My Daughter Using Claude AI (kbr.sh)

Leaking /etc./shadow from userspace by manipulating Intel branch predictors [pdf]

Comments (1)