1651
Things you must know before you can understand Meltdown as a developer
Meltdown is a cache-timing attack on Intel CPUs that allows all memory to be read by any process because of how they do Speculative Execution.
New
The latest blog posts to take off on Hacker News. 2,560 posts.
1652
Detecting Spectre and Meltdown Using Hardware Performance Counters
Security pros have been working on a new hardware attack type that exploits cache side-effects and speculative execution to perform privileged memory disclosure.
1653
The State of Atom's Performance
We are archiving Atom and all projects under the Atom organization for an official sunset on December 15, 2022.
1654
1655
1656
Potential Impact of Spectre on Processors in the Power family
View, search and download security bulletin information for individual IBM product versions and releases.
1657
Xen Project Spectre/Meltdown FAQ
Updated to v3 on Dec 12th! Google’s Project Zero announced several information leak vulnerabilities affecting all modern superscalar processors. Details can be found on their blog, and in the Xen Project Advisory 254. To help our users understand the impact and our next steps forward, we put together the
1658
1659
Chromium Security: Site Isolation
Site Isolation is a security feature in Chrome that offers additional protection against some types of security bugs. It uses Chrome's sandbox to make it harder for untrustworthy websites to access or steal information from your accounts on other websites.
1660
More details about mitigations for the CPU Speculative Execution issue
Posted by Matt Linton, Senior Security Engineer and Pat Parseghian, Technical Program Manager Yesterday, Google’s Project Zero team posted...
1661
1662
Today's CPU vulnerability: what you need to know
Posted by Matt Linton, Senior Security Engineer and Pat Parseghian, Technical Program Manager [Google Cloud, G Suite, and Chrome customers...
1663
Reading privileged memory with a side-channel
Posted by Jann Horn, Project ZeroWe have discovered that CPU data cache timing can be abused to e...
1664
Randomness 101: LavaRand in Production
As some of you may know, there's a wall of lava lamps in the lobby of our San Francisco office that we use for cryptography. In this post, we’re going to explore how that works.
1665
Escaping Docker container using waitid() – CVE-2017-5123
Prisma Cloud is the most complete Cloud Native Application Protection Platform (CNAPP) for code to cloud security in any cloud, multicloud, and hybrid environment.
1666
Dumping a PS4 Kernel in “Only” 6 Days
What if a secure device had an attacker-viewable crashdump format? What if that same device allowed putting arbitrary memory into the crashdump? Amazingly, the ps4 tempted fate by supporting both of these features! Let’s see how that turned out…
1667
1668
1669
Learning to operate Kubernetes reliably
Online payment processing for internet businesses. Stripe is a suite of payment APIs that powers commerce for businesses of all sizes.
1670
How to Design a Scalable Rate Limiting Algorithm
What is rate limiting? Navigate through the pros and cons of the available algorithms and best practices for how to design scalable rate limiting in Kong API.
1671
Exploiting Windows 10 in a Local Network with WPAD/PAC and JScript
by Ivan Fratric, Thomas Dullien, James Forshaw and Steven VittitoeIntroMany widely-deployed techn...
1672
1673
Hybridizer: High-Performance C# on GPUs
Hybridizer is a compiler from Altimesh that lets you program GPUs and other accelerators from C# code or .NET Assembly. Using decorated symbols to express parallelism, Hybridizer generates source code…
1674
On the dangers of Intel's frequency scaling
While I was writing the post comparing the new Qualcomm server chip, Centriq, to our current stock of Intel Skylake-based Xeons, I noticed a disturbing phenomena.
1675
PostgreSQL HA cluster failure: a post-mortem
Discover our incident review with our API and dashboard after the outage on 10th October.
1676
ReactOS 0.4.7 released
ReactOS is a free, opensource reimplementation of windows
1677
Introduction to Hierarchical State Machines
The formalism of Hierarchical State Machines (aka statecharts) makes the state machine approach truly applicable to real-life embedded systems. Read more.
1678
Sysdig Inspect: A GUI for System Call Analysis
Sysdig Inspect is a powerful interface for container troubleshooting and security investigation that uses sysdig capture files for local analysis
1679
Reducing Chrome crashes caused by third-party software
Update (04/26/2019): Third-party developers can now use this document to evaluate the impact of third-party blocking on their software. R...
1680