HyperThreading a rischio sicurezza!
Hyper-Threading, as currently implemented on Intel Pentium Extreme Edition, Pentium 4, Mobile Pentium 4, and Xeon processors, suffers from a serious security flaw. This flaw permits local information disclosure, including allowing an unprivileged user to steal an RSA private key being used on the same machine.
Administrators of multi-user systems are strongly advised to take action to disable Hyper-Threading immediately; single-user systems (i.e., desktop computers) are not affected. Details of how to exploit this security flaw are shown at BSDCan 2005 in Ottawa on May 13th, 2005.
The flaw is only a risk for servers right now.
Rispondi quotando
:
:
