SLAP and FLOP: Apple Silicon Speculative Execution Attacks
MP3•Episode home
Manage episode 472088985 series 3628532
Content provided by AmCan Tech. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by AmCan Tech or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://staging.podcastplayer.com/legal.
SLAP and FLOP are two new speculative execution attacks targeting Apple's M-series chips. SLAP exploits the Load Address Predictor (LAP) to leak data by predicting incorrect memory addresses, while FLOP leverages the Load Value Predictor (LVP) to predict incorrect data values. Both attacks allow unauthorized access to sensitive information from web browsers like Safari and Chrome, compromising data ranging from email content to financial details. Researchers demonstrated proof-of-concept attacks recovering data like browsing history and even book excerpts. Mitigation requires software patches from vendors and updated operating systems.
…
continue reading
16 episodes