Intel and AMD CPUs vulnerable to a new speculative execution attack (RETBLEED)

• retbleed

  1 145 2.7 C

  Arbitrary Speculative Code Execution with Return Instructions

  

I'm probably doing it wrong, but I'm getting SIGILL on Haswell for ret_bti and break_kaslr from the demo: https://github.com/comsec-group/retbleed

Though it seems like the code is not portable (?) between CPU microarchitectures.

• security-research-pocs

  5 1,814 1.5 C++

  Discontinued Proof-of-concept codes created as part of security research done by Google Security Team.

  

Those attacks relied on performance.now() https://github.com/google/security-research-pocs/blob/d10780...

Chrome has limited "performance.now" to have a relatively low resolution: https://chromium-review.googlesource.com/c/chromium/src/+/85...

Also, "2018 install of win10", you might have already been patched during install.

Microsoft rolled out specture/meltdown mitigations at the OS level in January 2018.

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• uBlock

  2,992 43,007 9.9 JavaScript

  uBlock Origin - An efficient blocker for Chromium and Firefox. Fast and lean.

• phc-winner-argon2

  14 4,650 0.0 C

  The password hash Argon2, winner of PHC

  

> Is there anything stronger than blowfish?

I think you mean bcrypt..

Both Argon2 and scrypt win over that:

https://github.com/P-H-C/phc-winner-argon2

• scrypt

  15 460 7.0 C

  The scrypt key derivation function was originally developed for use in the Tarsnap online backup system and is designed to be far more secure against hardware brute-force attacks than alternative functions such as PBKDF2 or bcrypt.

  

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

Suggest a related project