Here we go again! The #Spectre-like #PACMAN flaw affecting ARM-based chips include the Apple M1:
https://pacmanattack.com/
https://www.csail.mit.edu/news/researchers-discover-new-hardware-vulnerability-apple-m1-chip
https://pacmanattack.com/paper.pdf
Follow
""Future CPU designers should take care to consider this attack when building the secure systems of tomorrow. Developers should take care to not solely rely on pointer authentication to protect their software.""
Can I tell if someone is using PACMAN against me?
probably not.
@stman I can't really see how the industry will escape this pit they've dug for themselves. After all, they've known about this class of microarchitectural flaws since 1995!
well, that's odd. The AppleInsider article states that the attack requires physical access, but the pacmanattack.com website clearly says they did all their experiments over the network.
#PACMAN #infosec