Hacker News Reader

Parent Full thread

niea_11

A comment I found on reddit:

The Linux one at least is from the CANVAS product by Immunity Inc.

https://www.reddit.com/r/netsec/comments/lv5qal/spectre_expl...

View on HN

$pwd

/home/user/Downloads/Immunity Canvas 7.26/Immunity Canvas 7.26/exploits/local/unix/spectre_file_leak/bin

$sha256sum spectre

6461d0988c835e91eb534757a9fa3ab35afe010bec7d5406d4dfb30ea767a62c spectre

Can confirm.

So... Is this working with mitigations on?

Too lazy to test it without grsec, but perhaps the helper script will give you an idea http://ix.io/2Rjn

certainly an interesting read. says it was written in 2015 which could explain why it doesn't support modern ubuntu/fedora or maybe it was fixed in recent kernels? latest kernels i see are from the mid/late 4.x series

How much does canvas cost these days?

$0 :)

Reply on news.ycombinator.com