[Info-vax] Page cache side-channel attack revealed

[Simon Clubley]

On 2019-01-07, Stephen Hoffman <seaohveh at hoffmanlabs.invalid> wrote:
> On 2019-01-07 01:36:39 +0000, Simon Clubley said:
>
>> Is VMS vulnerable to the same techniques ?
>
> Prolly.
>
> Here's the paper: https://arxiv.org/abs/1901.01161
>
> This seems both a semi-portable covert channel in one potential usage 
> discussed in the paper, and a discussion of "fun" with probing shared 
> libraries?installed images on OpenVMS?in another context.
>

I've just read through the paper this evening.

My take is that it's interesting but limited in practicality especially
when the mitigations are applied.

It was interesting to note they were able to exploit the behaviour
of a system call where the behaviour had been retained for backwards
compatibility reasons.

Simon.

-- 
Simon Clubley, clubley at remove_me.eisner.decus.org-Earth.UFP
Microsoft: Bringing you 1980s technology to a 21st century world