Billions of computers at hacking risk: Indian-origin scientist

An Indianorigin researcher has warned that billions of computers and other devices across the globe are vulnerable today owing to a vulnerability named Spectre that was first discovered in 2018 but is open to hackers againSince Spectre was discovered the worlds most talented computer scientists from industry and academia have worked on software patches and hardware defenses confident theyve been able to protect the most vulnerable points in the speculative execution process without slowing down computing speeds too muchHowever researchers led by Ashish Venkat at the University of Virginias School of Engineering and Applied Science UVA Engineering discovered that computer processors are open to hackers againThey found a whole new way for hackers to exploit something called a microop cache which speeds up computing by storing simple commands and allowing the processor to fetch them quickly and early in the speculative execution processMicroop caches have been built into Intel computers manufactured since 2011Venkats team discovered that hackers could steal data when a processor fetches commands from the microop cacheThink about a hypothetical airport security scenario where TSA lets you in without checking your boarding pass because 1 it is fast and efficient and 2 you will be checked for your boarding pass at the gate anyway Venkat saidA computer processor does something similar It predicts that the check will pass and could let instructions into the pipelineUltimately if the prediction is incorrect it will throw those instructions out of the pipeline but this might be too late because those instructions could leave sideeffects while waiting in the pipeline that an attacker could later exploit to infer secrets such as a password he elaboratedBecause all current Spectre defenses protect the processor in a later stage of speculative execution they are useless in the face of Venkats teams new attacksTwo variants of the attacks the team discovered can steal speculatively accessed information from Intel and AMD processorsIntels suggested defense against Spectre which is called LFENCE places sensitive code in a waiting area until the security checks are executed and only then is the sensitive code allowed to execute Venkat informedBut it turns out the walls of this waiting area have ears which our attack exploits We show how an attacker can smuggle secrets through the microop cache by using it as a covert channelThis newly discovered vulnerability will be much harder to fixIn the case of the previous Spectre attacks developers have come up with a relatively easy way to prevent any sort of attack without a major performance penalty for computingThe difference with this attack is you take a much greater performance penalty than those previous attacks said PhD student Logan MoodyVenkats team has disclosed the vulnerability to the product security teams at Intel and AMDThe teams paper has been accepted by the highly competitive International Symposium on Computer Architecture or ISCAThis story has been sourced from a third party syndicated feed agencies Midday accepts no responsibility or liability for its dependability trustworthiness reliability and data of the text Midday managementmiddaycom reserves the sole right to alter delete or remove without notice the content in its absolute discretion for any reason whatsoever