CacheOut: Leaking Data on Intel CPUs via Cache Evictions (cacheoutattack.com)

Article summary

Researchers have discovered a new speculative execution attack called CacheOut, which can leak data from Intel CPUs across many security boundaries. The attack exploits the CPU's caching mechanisms to select what data to leak, and can violate nearly every hardware-based security domain. CacheOut can extract sensitive data, including RSA keys and neural network weights, and can even breach the confidentiality of SGX enclaves. Intel will provide CPU microcode updates to mitigate the issue.

Main themes

• CacheOut attack
• Intel CPU vulnerabilities
• TSX instructions
• Security vs. performance
• AMD vs. Intel
• Speculative execution attacks

What commenters say

• Disabling TSX is a necessary step to prevent CacheOut attacks, despite potential performance impacts.
• AMD's lack of support for TSX instructions makes their processors less vulnerable to CacheOut attacks.
• The security risks associated with TSX outweigh its potential performance benefits, and it should be disabled by default.
• Intel's prioritization of performance over security has led to a series of vulnerabilities, including CacheOut.
• The attack's slow leakage rate makes it less of a concern, but it could still be exploited by determined attackers.
• Disabling Hyper-threading is not a viable workaround for CacheOut attacks, as they can still occur in non-HyperThreaded scenarios.
• The fact that CacheOut can be exploited even without Hyper-threading highlights the need for a more comprehensive solution to address the underlying security issues.