Google emits data-leaking proof-of-concept Spectre exploit for Intel CPUs to really get everyone's attention.

I don't believe it, I had to see it, I came back, I came back haunted

Google on Friday released proof-of-concept code for conducting a Spectre-based attack against its Chrome browser to show how web developers can take steps to mitigate browser-based side-channel attacks.

The code, posted to GitHub, demonstrates how an attacker can pull data from device memory at speed of 1kB/s when running on Chrome 88 on an Intel Skylake CPU. According to Google, the attack should work on other browsers, even those running on Arm-based Apple M1 chips.

https://www.theregister.com/2021/03/12/google_spectre_code/

https://github.com/google/security-research-pocs/tree/master/spectre.js

演示页面：
https://leaky.page/

#google #chrome #spectre #meltdown #poc #browser #security #sidechannel
https://atolla.xyz/notes/01F0XWA53A7MH81N9433X12VSP