Skip Navigation

Posts
3
Comments
27
Joined
3 yr. ago

InfoSec Person | Alt-Account#2

  • Thanks for the question!

    As long as caches have existed, very similar styles of side channels have been demonstrated since the late 90s. A lot of the terminology we use (flush+reload, flush+flush...) are attack techniques that have been already demonstrated on CPU caches, and these demonstrations are at least a decade old.

    Flush+Reload: https://www.usenix.org/conference/usenixsecurity14/technical-sessions/presentation/yarom

    Flush+Flush: https://gruss.cc/files/flushflush.pdf

    Invalidate+Compare (GPU caches, 2024): https://www.usenix.org/conference/usenixsecurity24/presentation/zhang-zhenkai

    My colleague, Hannes, found similar styles of attacks existed with the Linux DNS cache too: https://hannesweissteiner.com/pdfs/dmt.pdf (also published at NDSS 26!)

    The one really big difference between the page-cache side channel and other side channels is the "monitor" primitive. There are methods that the OS provides which directly report the presence of a page in cache. These are syscalls like mincore (mitigated in 2019), preadv2 + rwf_nowait (unmitigated), and cachestat (mitigated in 2025).

    With these syscalls, we don't even have to rely on timing information (is page access fast -> cached; is it slow -> not cached). These syscalls really set the page-cache side channel apart because you can nondestructively figure out whether a page is in cache.

    The page-cache side channel was first explored in 2019. It was explored on Linux but also on Windows by my advisor et al.: https://gruss.cc/files/pagecacheattacks.pdf

    Hope this answers your question :D

  • Thanks for cross-posting and tagging me!

  • I need a recognisable domain name website that google or duckduckgo has picked as the product.

    This doesn't always work. For example, I used to (and still do) see a lot of fake websites when I l type revanced (https://revanced.app/) on duckduckgo, and I've nearly fallen for two of the fake ones before (I think two of .com / .org / .to...?)

    Thankfully ublock origin warns users of this:

    Otherwise, I'd have 100% downloaded some malware-loaded crap.

  • Also there in Passin' Me By by The Pharcyde (1992)

    When I try or make some sort of attempt, I simpDamn, I wish I wasn't such a wimp

  • Not exactly what you asked, but do you know about ufw-blocklist?

    I've been using this on my multiple VPSes for some time now and the number of fail2ban failed/banned has gone down like crazy. Previously, I had 20k failed attempts after a few months and 30-50 currently-banned IPs at all times; now it's less than 1k failed after a year and maybe 3-ish banned at any time.

    There was also that paid service where users share their spammy IP address attempts with a centralized network, which does some dynamic intelligence monitoring. I forgot the name and search these days isn't great. Something to do with "Sense"? It was paid, but well recommended as far as I remember.

    Edit: seems like the keyword is " threat intelligence platform"

  • Thanks loads! It's pretty sick and now is my lock screen wallpaper ;D

  • My personal website is made using Hugo, sitting behind Caddy, and hosted on Racknerd. I see elsewhere in the thread that you're looking for something akin to a $5/month VPS, but racknerd is MUCH cheaper for much more vCPU + vRAM (older hardware, but that's not a deal breaker for hosting a static website).

    I used to do $6/Month on Digital Ocean for 1 vCPU + 1GB vRAM + 1TB bandwidth, but now I'm somewhere like $3/Month for 2 vCPU + 2.5GB vRAM + 5TB bandwidth [1]. In fact, I paid $6 extra to have the server in France. Otherwise it's $30 a year.

    Check out racknerd tracker [2]. I found out about it through lemmy many months ago [3]. The person who made the website gets some affiliate stuff.

    [1] https://racknerdtracker.com/?product=211/25gb-kvm-vps

    [2] https://racknerdtracker.com/

    [3] https://lemmy.world/comment/11855808

  • I'm unsure whether your formatting messed up, but you shouldn't have a space between the shebang (#!) and the interpreter path (/bin/bash). Also add a new line before your command:

     sh
        
    #!/bin/bash
    
    gnome-terminal -- sh -c gotop
    
      

    I tried this on my system (with htop instead of gotop) and it worked.

  • Technology @lemmy.world

    An 800 Star Repository Just Went Private

    snee.la /posts/800-star-repo/
  • Programmer Humor @programming.dev

    Mcafee accidentally made users call the devs of SQLite and complain.

  • Science Memes @mander.xyz

    Slightly less than two drinks = positive effect on programming ability