2
New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing (thehackernews.com)
submitted 1 month ago by [B] to c/pulse_of_truth@infosec.pub
comment fedilink hide all child comments
 

Researchers have disclosed a new hardware attack, called DDRop, that breaks the memory protection in Intel and AMD confidential computing by silently dropping writes to a server's memory, so the processor keeps reading old encrypted data as if it were current.

The attack requires an attacker who already controls the server's software and can briefly access the machine to insert a small circuit

no comments (yet)

sorted by: hot top controversial new old
there doesn't seem to be anything here
3 comments in c/technology@lemmy.ml view that post
[–] 3 points 1 month ago

great. we are gonna need it to jailbreak our own computers.

  • permalink
  • fedilink
  • source
    •
    [–] 3 points 1 month ago (1 child)

    What's remarkable is that they can extend the trace length without DDR5 timings shitting the bed lol. Can't even put 4 sticks in most boards without spooky interposers.

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
    • 1 comment in c/technology@lemmy.world view that post
    [–] 11 points 1 month ago

    I suspect we’ll only see more and more vulnerabilities like this exposed as LLMs are used by capable security researchers and computer criminals to reduce the amount of work required to explore concepts that wouldn’t have been worthwhile in the past.

    The article doesn't mention anything about LLMs. Neither does the code repository or the paper , with the exception of

    This paper was edited for grammar using Grammarly and Google Gemini.

    in the Acknowledgements.

    What makes you think that an LLM made this work possible? The technique of using an interposer to mess with memory writes is both an obvious one and one that has been used for previous attacks, as mentioned in the article.

  • permalink
  • fedilink
  • source
    •