Hacker News Reader

> RowHammer and the other speculative execution are really interesting attacks, but have they ever actually been used in the wild yet?

It's a question I've been asking myself for many highly publicized vulns. I once made this table: https://github.com/hannob/vulns

View on HN

Thanks for making this table, it's really interesting. But I'm not sure I fully understand the point it makes (if there is one). Most of the vulnerabilities absolutely had potential of abuse, but were not used in the wild because the vulnerability disclosure process actually worked as intended and they were promptly patched.

> not used in the wild because the vulnerability disclosure process actually worked

This mental model kind of works for thinking about widespread exploitation but of course the vulnerabilities don't materialize when they are publicized, and most exploitations aren't publicly documented even if detected.

Reply on news.ycombinator.com