MDS: Microarchitectural Data Sampling🔒 SSL Verified

Table of Contents

• ↓ RIDL
• ↓ Fallout
• ↓ People
• ↓ Overview
• ↓ Exploit demos
• ↓ Interactive guide to speculative execution attacks
• ↓ Top Alternatives to mdsattacks.com

6-Month Traffic Trend Estimate

Official Contact & Profiles

Visual representation extracted from mdsattacks.com

Content Snippets from mdsattacks.com

"Attacks on the newly-disclosed "MDS" hardware vulnerabilities in Intel CPUs"

"The RIDL and Fallout speculative execution attacks allow attackers to leak private data across arbitrary security boundaries on a victim system, for instance compromising data held in the cloud or leaking your data to malicious websites. Our attacks leak data by exploiting the 4 newly disclosed Microarchitectural Data Sampling (or MDS) side-channel vulnerabilities in Intel CPUs. Unlike existing attacks, our attacks can leak arbitrary in-flight data from CPU-internal buffers (Line Fill Buffers, Load Ports, Store Buffers), including data never stored in CPU caches. We show that existing defenses against speculative execution attacks are inadequate, and in some cases actually make things worse. Attackers can use our attacks to leak sensitive data despite mitigations, due to vulnerabilities deep inside Intel CPUs."

"RIDL (Rogue In-Flight Data Load) shows attackers can exploit MDS vulnerabilities to mount practical attacks and leak sensitive data in real-world settings. By analyzing the impact on the CPU pipeline, we developed a variety of practical exploits leaking in-flight data from different internal CPU buffers (such as Line-Fill Buffers and Load Ports), used by the CPU while loading or storing data from memory."

"We show that attackers who can run unprivileged code on machines with recent Intel CPUs - whether using shared cloud computing resources, or using JavaScript on a malicious website or advertisement - can steal data from other programs running on the same machine, across any security boundary: other applications, the operating system kernel, other VMs (e.g., in the cloud), or even secure (SGX) enclaves."

Key Topics & Focus Areas for mdsattacks.com:

RIDL

Fallout

People

Overview

Exploit demos

Interactive guide to speculative execution attacks