Experimental News Clipping Site

Tag: side-channel attack

  • The Register: Boffins trick AI model into giving up its secrets

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/12/18/ai_model_reveal_itself/ Source: The Register Title: Boffins trick AI model into giving up its secrets Feedly Summary: All it took to make an Google Edge TPU give up model hyperparameters was specific hardware, a novel attack technique … and several days Computer scientists from North Carolina State University have devised a way to copy…

  • Hacker News: Implementing network time security (NTP NTS) at the hardware level (2022)

    —

    by

    system automation
    in

    Source URL: https://labs.ripe.net/author/christer-weinigel/implementing-network-time-security-at-the-hardware-level/ Source: Hacker News Title: Implementing network time security (NTP NTS) at the hardware level (2022) Feedly Summary: Comments AI Summary and Description: Yes Summary: The implementation of Network Time Security (NTS) at a hardware level offers significant advancements in securing Network Time Protocol (NTP) services. By addressing vulnerabilities inherent in the legacy…

  • Hacker News: Computing with Time: Microarchitectural Weird Machines

    —

    by

    system automation
    in

    Source URL: https://cacm.acm.org/research-highlights/computing-with-time-microarchitectural-weird-machines/ Source: Hacker News Title: Computing with Time: Microarchitectural Weird Machines Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the development and implications of microarchitectural weird machines (µWMs), which exploit CPU microarchitectural features to create powerful obfuscation techniques for malware. This research provides insights into how these µWMs can…

  • Hacker News: When machine learning tells the wrong story

    —

    by

    system automation
    in

    Source URL: https://jackcook.com/2024/11/09/bigger-fish.html Source: Hacker News Title: When machine learning tells the wrong story Feedly Summary: Comments AI Summary and Description: Yes Summary: The text presents a comprehensive account of a research project that explores the vulnerabilities of machine learning-assisted side-channel attacks, particularly in web browsers. It emphasizes the implications of using machine learning for…

  • Bulletins: Vulnerability Summary for the Week of October 28, 2024

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/bulletins/sb24-309 Source: Bulletins Title: Vulnerability Summary for the Week of October 28, 2024 Feedly Summary: High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info Patch Info acnoo — flutter_api  Authentication Bypass Using an Alternate Path or Channel vulnerability in Acnoo Acnoo Flutter API allows Authentication Bypass.This issue affects Acnoo Flutter API:…

  • Hacker News: Cross-Process Spectre Exploitation

    —

    by

    system automation
    in

    Source URL: https://grsecurity.net/cross_process_spectre_exploitation Source: Hacker News Title: Cross-Process Spectre Exploitation Feedly Summary: Comments AI Summary and Description: Yes **Summary**: This detailed text discusses a newly developed cross-process Spectre attack exploiting vulnerabilities in Intel processors, specifically involving the Indirect Branch Prediction Barrier (IBPB). The attack showcases how certain exploit methodologies can retain unauthorized data through microcode…

  • Schneier on Security: YubiKey Side-Channel Attack

    —

    by

    system automation
    in

    Source URL: https://www.schneier.com/blog/archives/2024/09/yubikey-side-channel-attack.html Source: Schneier on Security Title: YubiKey Side-Channel Attack Feedly Summary: There is a side-channel attack against YubiKey access tokens that allows someone to clone a device. It’s a complicated attack, requiring the victim’s username and password, and physical access to their YubiKey—as well as some technical expertise and equipment. Still, nice piece…

  • Wired: YubiKeys Are a Security Gold Standard—but They Can Be Cloned

    —

    by

    system automation
    in

    Source URL: https://arstechnica.com/security/2024/09/yubikeys-are-vulnerable-to-cloning-attacks-thanks-to-newly-discovered-side-channel/ Source: Wired Title: YubiKeys Are a Security Gold Standard—but They Can Be Cloned Feedly Summary: Security researchers have discovered a cryptographic flaw that leaves the YubiKey 5 vulnerable to attack. AI Summary and Description: Yes Summary: The text discusses a critical vulnerability in the YubiKey 5 hardware token due to a side-channel…

  • Hacker News: Yubikeys are vulnerable to cloning attacks thanks to side channel

    —

    by

    system automation
    in

    Source URL: https://arstechnica.com/security/2024/09/yubikeys-are-vulnerable-to-cloning-attacks-thanks-to-newly-discovered-side-channel/ Source: Hacker News Title: Yubikeys are vulnerable to cloning attacks thanks to side channel Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses a significant cryptographic vulnerability in the YubiKey 5 hardware authentication token, which has implications for security professionals and organizations relying on hardware tokens for two-factor authentication.…

  • Hacker News: EUCLEAK Side-Channel Attack on the YubiKey 5 Series

    —

    by

    system automation
    in

    Source URL: https://ninjalab.io/eucleak/ Source: Hacker News Title: EUCLEAK Side-Channel Attack on the YubiKey 5 Series Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses a significant security vulnerability discovered in the ECDSA implementation of Infineon Technologies’ cryptographic library found in FIDO hardware tokens, particularly impacting the YubiKey 5 Series. The vulnerability, termed…