cross-posted from: https://lemmy.sdf.org/post/59167483

Requires physical access:

The attack requires an attacker who already controls the server’s software and can briefly access the machine to insert a small circuit board, called an interposer, between the processor and a memory module.

So not like Spectre or Meltdown. I suspect we’ll only see more and more vulnerabilities like this exposed as LLMs are used by capable security researchers and computer criminals to reduce the amount of work required to explore concepts that wouldn’t have been worthwhile in the past.

  • Dran@lemmy.world
    link
    fedilink
    arrow-up
    2
    ·
    23 hours ago

    What’s remarkable is that they can extend the trace length without DDR5 timings shitting the bed lol. Can’t even put 4 sticks in most boards without spooky interposers.

    • eldavi@lemmy.ml
      link
      fedilink
      English
      arrow-up
      3
      ·
      7 hours ago

      it’s amazing what you can accomplish if you had the epstein classes’ resources at your disposal.