Forwarded from LoopDNS资讯播报
英特尔CPU曝新漏洞"分支特权注入" 可窃取内核敏感数据
苏黎世联邦理工学院研究人员发现英特尔现代CPU存在名为"分支特权注入"(CVE-2024-45332)的硬件级漏洞,攻击者可利用分支预测器(BTB/IBP)更新与指令执行不同步的缺陷,在权限切换时突破用户态与内核态隔离,以99.8%准确率窃取密码、加密密钥等特权内存数据。该漏洞影响第9代(Coffee Lake)及后续所有英特尔处理器,实测在Ubuntu 24.04系统上能以5.6KB/秒速率读取受保护的/etc/shadow文件。英特尔已发布微代码更新修复,但会导致最高8.3%性能损耗。研究团队将于USENIX Security 2025会议公布完整技术细节。
来源:Bleeping Computer
苏黎世联邦理工学院研究人员发现英特尔现代CPU存在名为"分支特权注入"(CVE-2024-45332)的硬件级漏洞,攻击者可利用分支预测器(BTB/IBP)更新与指令执行不同步的缺陷,在权限切换时突破用户态与内核态隔离,以99.8%准确率窃取密码、加密密钥等特权内存数据。该漏洞影响第9代(Coffee Lake)及后续所有英特尔处理器,实测在Ubuntu 24.04系统上能以5.6KB/秒速率读取受保护的/etc/shadow文件。英特尔已发布微代码更新修复,但会导致最高8.3%性能损耗。研究团队将于USENIX Security 2025会议公布完整技术细节。
来源:Bleeping Computer
😱17🥰2👍1
Forwarded from 每日消费电子观察 (horo)
主导 tsc 用 go 重构并提升其 10x 性能的 ron buckton 在微软的近期裁员计划中被裁员
========
提升 10x 性能,然后开掉 10x 人员,那就是 20x 的收益,赢
https://fixvx.com/rbuckton/status/1922364558426911039
========
提升 10x 性能,然后开掉 10x 人员,那就是 20x 的收益,赢
https://fixvx.com/rbuckton/status/1922364558426911039
vxTwitter / fixvx
💖 48.69K 🔁 2.46K
💖 48.69K 🔁 2.46K
Ron Buckton (@rbuckton)
After 18 years at Microsoft, with roughly a decade of that time working on TypeScript, I have unfortunately been let go in the latest round of layoffs. I need to take a few days to process before I start looking for work. Thanks to everyone who's been part…
🍾14😁9
Forwarded from Hacker News
Fingers wrinkle the same way every time they’re in the water too long (Score: 150+ in 14 hours)
Link: https://readhacker.news/s/6urWr
Comments: https://readhacker.news/c/6urWr
Link: https://readhacker.news/s/6urWr
Comments: https://readhacker.news/c/6urWr
Forwarded from Hacker News
SMS 2FA is not just insecure, it's also hostile to mountain people (🔥 Score: 158+ in 2 hours)
Link: https://readhacker.news/s/6utBT
Comments: https://readhacker.news/c/6utBT
Link: https://readhacker.news/s/6utBT
Comments: https://readhacker.news/c/6utBT
🤝1
Forwarded from Hacker News
Interferometer Device Sees Text from a Mile Away (❄️ Score: 150+ in 4 days)
Link: https://readhacker.news/s/6ufjf
Comments: https://readhacker.news/c/6ufjf
Link: https://readhacker.news/s/6ufjf
Comments: https://readhacker.news/c/6ufjf
Physics
Interferometer Device Sees Text from a Mile Away
A high-resolution imaging system captures distant objects by shining laser light on them and detecting the reflected light.
❤1
Forwarded from Solidot 纯净版
随着流量下降 Stack Overflow 考虑品牌重塑
#人工智能
由于 AI 聊天机器人在回答编程相关问题上更快捷更方便,著名编程问题社区 Stack Overflow 的流量持续下降,Stack Overflow 母公司 Stack Exchange 表示在考虑品牌重塑。根据官方统计数据,2025 年 4 月的问题和答案数比 2024 年同期下降了 64% 以上,比峰值的 2020 年 4 月下降了 90% 以上。CEO Prashanth Chandrasekar 表示公司考虑在问答功能外加入社区和职业发展服务。该公司已在试验多项新服务,包括 AI Answer Assistant 和Question Assistant,以及与 Indeed 合作的招聘网站等。
devclass : Stack Overflow seeks rebrand as traffic continues to plummet – which is bad news for developers
#人工智能
由于 AI 聊天机器人在回答编程相关问题上更快捷更方便,著名编程问题社区 Stack Overflow 的流量持续下降,Stack Overflow 母公司 Stack Exchange 表示在考虑品牌重塑。根据官方统计数据,2025 年 4 月的问题和答案数比 2024 年同期下降了 64% 以上,比峰值的 2020 年 4 月下降了 90% 以上。CEO Prashanth Chandrasekar 表示公司考虑在问答功能外加入社区和职业发展服务。该公司已在试验多项新服务,包括 AI Answer Assistant 和Question Assistant,以及与 Indeed 合作的招聘网站等。
devclass : Stack Overflow seeks rebrand as traffic continues to plummet – which is bad news for developers
😭23😢3🤔2
Hacker News
Interferometer Device Sees Text from a Mile Away (❄️ Score: 150+ in 4 days) Link: https://readhacker.news/s/6ufjf Comments: https://readhacker.news/c/6ufjf
news.ustc.edu.cn
中国科大实现基于主动光学强度干涉的合成孔径成像-中国科大新闻网
5月9日,中国科学技术大学潘建伟、张强、徐飞虎等人联合中国科学院西安光学精密机械研究所等国内外科研机构,首次提出并实验验证了主动光学强度干涉技术合成孔径技术,实现了对1.36公里外毫米级目标的高分辨成像。实验系统的成像分辨率较干涉仪中的单台望远镜提升约14倍。该成果以“Active Optical Intensity Interferometry”为题发表在国际学术期刊《物理评论快报》上,被选为编辑推荐论文(Editors’Suggestion),并被美国...
🔥7🤨2
Forwarded from Hacker News
Working on complex systems: What I learned working at Google (❄️ Score: 155+ in 2 days)
Link: https://readhacker.news/s/6uprB
Comments: https://readhacker.news/c/6uprB
Link: https://readhacker.news/s/6uprB
Comments: https://readhacker.news/c/6uprB
read.thecoder.cafe
Working on Complex Systems: Patterns I Learned at Google
This is why recognizing whether a system is complicated or complex is so important: it shapes how we should approach problem-solving.