A new security vulnerability has been discovered in Apple's Mac and Bebo Love (2021) BindasTimes Hindi Short FilmMacBook computers – and the worst part is that it's unpatchable.
Academic researchers discoveredthe vulnerability, first reported by Ars Technica, which allows hackers to gain access to secret encryption keys on Apple computers with Apple's new Silicon M-Series chipset. This includes the M1, M2, and M3 Apple MacBook and Mac computer models.
SEE ALSO: Bing vulnerability made it possible to alter search resultsBasically, this vulnerability can be found in any new Apple computer released from late 2020 to today.
The issue lies with prefetchers— components meant to predictively retrieve data before a request to increase processing speed — and the opening they leave for malicious attacks from bad actors.
The researchers have dubbed the attack "GoFetch," which they describe as "a microarchitectural side-channel attack that can extract secret keys from constant-time cryptographic implementations via data memory-dependent prefetchers (DMPs)."
A side-channel attack is a type of cyber attack that uses extra information that's left vulnerable due to the design of a computer protocol or algorithm.
The researchers explained the issue in an email to Ars Technica:
Prefetchers usually look at addresses of accessed data (ignoring values of accessed data) and try to guess future addresses that might be useful. The DMP is different in this sense as in addition to addresses it also uses the data values in order to make predictions (predict addresses to go to and prefetch). In particular, if a data value "looks like" a pointer, it will be treated as an "address" (where in fact it's actually not!) and the data from this "address" will be brought to the cache. The arrival of this address into the cache is visible, leaking over cache side channels.
Our attack exploits this fact. We cannot leak encryption keys directly, but what we can do is manipulate intermediate data inside the encryption algorithm to look like a pointer via a chosen input attack. The DMP then sees that the data value "looks like" an address, and brings the data from this "address" into the cache, which leaks the "address." We don’t care about the data value being prefetched, but the fact that the intermediate data looked like an address is visible via a cache channel and is sufficient to reveal the secret key over time.
Basically, the researchers discovered that the DMPs in Apple's Silicon chipsets – M1, M2 and, M3 – can give hackers access to sensitive information, like secret encryption keys. The DMPs can be weaponized to get around security found in cryptography apps, and they can do so quickly too. For example, the researchers were able to extract an 2048-bit RSA key in under one hour.
Usually, when a security flaw is discovered nowadays, a company can patch the issue with a software fix. However, the researchers say this one is unpatchable because the issue lies with the "microarchitectural" design of the chip. Furthermore, security measures taken to help mitigate the issue would require a serious degradation of the M-series chips' performance.
Researchers saythat they first brought their findings to Apple's attention on December 5, 2023. They waited 107 days before disclosing their research to the public.
Topics Apple Cybersecurity MacBook
'The Last of Us' Season 2, episode 3's opening credits has a heartbreaking change
Kendall Jenner unexpectedly deleted her Instagram account
Millions of Indians are watching YouTube to find if their new Rs 2,000 notes are waterproof
Hero cow evades exportation by diving into the sea to freedom
Analyzing Graphics Card Pricing: May 2018
Leave it to the internet to troll the supermoon
Kendall Jenner unexpectedly deleted her Instagram account
'The Simpsons' includes an ironic nod to its Trump election prediction
How to Easily Make iPhone Ringtones Using Only iTunes
'The Walking Dead' just keeps kicking us when we're down
NYT Connections Sports Edition hints and answers for April 23: Tips to solve Connections #212
Earthquake
Apple Pay adds nonprofit donations and the timing is totally a coincidence
The empowered alt
Best headphones deal: Save up to 51% on Beats at Amazon
Koala drops in on local accountant because money don't grow on trees
'Fantastic Beasts and Where to Find Them': Movie Review
The 'world's saddest polar bear' saga continues as Pizza the bear gets some relief
Mary Shows Up
The Brexit plan is there is no Brexit plan, says leaked memo
Twitter scraps press email's autoFirst Position by Yona Zeldis McDonough'Minx' Season 2 review: Why in the world did Max cancel this?Many Happy Returns, Penelope Fitzgerald by Sadie SteinAre 'Oppenheimer' and 'Dune' the same movie?Trump's campaign exploited default optPerseid meteor shower 2023: How to see themCoziness Porn, and Other News by Sadie SteinInstagram copies another TikTok feature with 'Remix'Coziness Porn, and Other News by Sadie SteinParler forced to explain 'free speech' to angry usersMap of the World by Sadie SteinTragic, Indeed by Sadie SteinAlmanac by Sadie SteinHow to host a Passover seder on ZoomReddit is taking control of large subreddits that are still protesting its API changesExplained: Albert Einstein's role in 'Oppenheimer'Darcy vs. Knightley, and Other News by Sadie SteinThe Ghost of Christmas Past by Sadie SteinParler forced to explain 'free speech' to angry users 'Wordle' today: Here's the answer, hints for June 25 The world's most powerful leaders once rode Segways I want to have karaoke night with these syrup containers from IHOP Instagram to test video selfies for age verification Stephen King has come up with a new campaign slogan for Trump Anthony Scaramucci recalls brief time in the White House through terrible dance How LGBTQ people are breaking down barriers to take on the outdoors Julia Louis YouTube promises creators more transparency and expanded features Here's why you should make your bed every morning 15 best musicals on Netflix that will dazzle and delight you Americans' privacy threatened by Supreme Court's Roe decision, experts say Terrifying video shows a bridge sagging under the weight of a massive bus Amy Schumer supports NFL protesters by saying no to Super Bowl ads Twitter is testing Notes, a new longform format Paramount+ launches in the UK: Everything you need to know You need to check out this cool coin with an amazing hidden feature 5 Bookmarking apps for saving stories you want to read later Julian Assange faces U.S. extradition after UK gives green light Google's AI LaMDA isn't sentient, but has racial and gender biases
2.0164s , 10131.046875 kb
Copyright © 2025 Powered by 【Bebo Love (2021) BindasTimes Hindi Short Film】,Exquisite Information Network