Slashdot Mirror

← Back to Stories (view on slashdot.org)

Kaspersky To Demo Attack Code For Intel Chips

Posted by ScuttleMonkey on from the also-releasing-a-paint-by-number dept.

snydeq writes "Kris Kaspersky will demonstrate how attackers can target flaws in Intel microprocessors to remotely attack a computer using JavaScript or TCP/IP packets, regardless of OS. The demo will be presented at the Hack In The Box Security Conference in Kuala Lumpur in October and will show how processor bugs can be exploited using certain instruction sequences and a knowledge of how Java compilers work, allowing an attacker to take control of the compiler. The demonstrated attack will be made against fully patched computers running a range of OSes, including Windows XP, Vista, Windows Server 2003, Windows Server 2008, Linux, and BSD. An attack against a Mac is also a possibility."

19 of 303 comments (clear)

  1. Heh... by pushing-robot · · Score: 5, Funny

    At least I know I'm safe because I run... Oh, crap.

    --
    How can I believe you when you tell me what I don't want to hear?
    1. Re:Heh... by mjs_ud · · Score: 3, Funny

      Time to pull the ethernet cable out. Would someone like to send me the slashdot articles via USPS? There aren't any potential problems with that solution are there? Wait...please send anthrax free too.

      --
      return EXIT_SUCCESS;
    2. Re:Heh... by phorm · · Score: 5, Funny

      At least I know I'm safe because I run...

      AMD?

    3. Re:Heh... by Kamineko · · Score: 4, Funny

      Cut it out! No amount of magic spells are going to mitigate this damage!

    4. Re:Heh... by mweather · · Score: 5, Funny

      Sure, if you run the host computer with an AMD chip. But that would be silly.

    5. Re:Heh... by jimbolauski · · Score: 5, Funny

      My Chinese knockoff fentium processor will be safe.

      --
      Knowledge = Power
      P= W/t
      t=Money
      Money = Work/Knowledge so the less you know the more you make
    6. Re:Heh... by elrous0 · · Score: 4, Funny

      For the first time in a two years, I'm actually glad I went with AMD.

      --
      SJW: Someone who has run out of real oppression, and has to fake it.
  2. That's Nothing, This November I'm Going To... by ergo98 · · Score: 5, Funny

    ...demonstrate how you can make a 1GW fusion reactor out of nothing but a sweaty gym sock and the corpse of a field mouse.

    No, seriously. 100%. Cross my heart.

    1. Re:That's Nothing, This November I'm Going To... by Yvan256 · · Score: 3, Funny

      Macgyver is that you?

    2. Re:That's Nothing, This November I'm Going To... by Thelasko · · Score: 5, Funny

      I'd be more impressed if you demonstrated a working 86 Ford Escort.

      --
      One of our competitors trademarked the term "hypothesis". From now on, we will call them "boneheaded ideas".
  3. GNU Hurd Wins Again by y86 · · Score: 4, Funny

    It's OK I run hurd.

    1. Re:GNU Hurd Wins Again by jamieswith · · Score: 3, Funny

      Yeah, you have nothing to worry about - not even the virus writers make programs for hurd!

  4. java: write once... by Anonymous Coward · · Score: 3, Funny

    ...hack everywhere

  5. Re:Java or Javascript? by xzaph · · Score: 3, Funny

    Obviously, it's Javascript implemented in Java.

  6. That's it... by Thelasko · · Score: 4, Funny

    no amount of tinfoil can protect me from this exploit. Only one thing left to do...

    *unplugs ethernet adapter*
    [NO CARRIER]

    --
    One of our competitors trademarked the term "hypothesis". From now on, we will call them "boneheaded ideas".
  7. Publicly available? by AlHunt · · Score: 3, Funny

    "I'm going to show real working code...and make it publicly available," Kaspersky said,

    Indeed. And are you going to make patches publicly available for all the hardware and operating systems in the world, too?

    --
    1 in 4 Maine children in struggle with hunger.
  8. Plan 9 baby by Bananatree3 · · Score: 3, Funny

    I run Hurd through an emulator on a Plan 9 box. hack that!

  9. Re:Don't worry. . . by ymail.com · · Score: 4, Funny

    If Intel doesn't release that hardware patch, it's time to go play in another Sandbox.

    Or else go back to 1999 where Pentium III machines with Intel's processor ID enabled in CMOS enable shoppers to have an "enhanced online experience" while they run IE 4.01 from Windows machines that aren't behind a firewall ... to safely prove who they are to websites.

  10. Discovery channel by Mathness · · Score: 5, Funny

    As seen on today's TV schedule for Discovery

    Now showing: Intel, when code attacks.
    Next show: Lasers.
    Next week: Shark week.

    --
    Carbon based humanoid in training.