Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

FWIW, that PoC (reading user memory only) still works on 10.13.2 even after the patch is applied.


The KAISER[0] fix which is what has been patched by OSes for Meltdown only resolves full physical memory and kernel memory access. You can still use Meltdown techniques to read arbitrary memory in your process, but this seems expected.

0: https://en.wikipedia.org/wiki/Kernel_page-table_isolation




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: