12,399 views

, 4 tweets, 1 min read Read on Twitter

view original on Twitter

view original on Twitter

We found several things here:
1. Flush+Reload enables highly reliable exploitation of DF bugs (change value exactly @ the right cycle) [1/4]

External Tweet loading...
If nothing shows, it may have been deleted
by @cynicalsecurity view original on Twitter

2. with F+R: first automated DF vs. DF-bug distinguisher (prev. "several days" of manual work)
3. Relation DF-bug (a value changes [2/4]

while assumed it cannot) <-> HTMs (value cannot change in a transaction): Wrap syscalls preventatively+autom. in TSX transactions->[3/4]

prevent DF-bugs (even compiler-introduced ones). TSX is fast -> some syscalls get faster + TSX transactions can be large [4/4]

Missing some Tweet in this thread?
You can try to force a refresh.

Like this thread? Get email updates or save it to PDF!

Get real-time email alerts when new unrolls are available from this author!

Twitter may remove this content at anytime, convert it as a PDF, save and print for later use!

Try unrolling a thread yourself!

1) Follow Thread Reader App on Twitter so you can easily mention us!

2) Go to a Twitter thread (series of Tweets by the same owner) and mention us with a keyword "unroll" @threadreaderapp unroll

You can practice here first or read more on our help page!