# uh oh... exploit effects windows, linux AND apple

**URL:** https://forums.speedlife.net/t/uh-oh-exploit-effects-windows-linux-and-apple/51589
**Category:** NYSpeed Off Topic
**Created:** [July 16, 2008, 12:36pm UTC](https://forums.speedlife.net/t/uh-oh-exploit-effects-windows-linux-and-apple/51589 "2008-07-16T12:36:33Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![Dr.Stevil](https://avatars.discourse-cdn.com/v4/letter/d/da6949/32.png) [@Dr.Stevil](https://forums.speedlife.net/u/Dr.Stevil)
#### Post date: [July 16, 2008, 12:36pm UTC](https://forums.speedlife.net/t/uh-oh-exploit-effects-windows-linux-and-apple/51589/1 "2008-07-16T12:36:33Z")

</div>

[http://www.hardocp.com/news.html?news=MzM3MTQsLCxoZW50aHVzaWFzdCwsLDE=](http://www.hardocp.com/news.html?news=MzM3MTQsLCxoZW50aHVzaWFzdCwsLDE=)

> Security researcher Kris Kaspersky says he has plans to demonstrate how an attacker can [exploit a flaw in Intel processors](http://www.infoworld.com/article/08/07/14/Researcher_to_demonstrate_attack_code_for_Intel_chips_1.html) to remotely attack a computer using JavaScript or TCP/IP packets, regardless of what [operating system](http://www.hardocp.com/news.html?news=MzM3MTQsLCxoZW50aHVzaWFzdCwsLDE=#) the computer is running.
> 
> Kaspersky will demonstrate how such an attack can be made in a presentation at the upcoming Hack In The Box (HITB) Security Conference in Kuala Lumpur, Malaysia, during October. The proof-of-concept attacks will show how [processor](http://www.hardocp.com/news.html?news=MzM3MTQsLCxoZW50aHVzaWFzdCwsLDE=#) bugs, called errata, can be exploited using certain instruction sequences and a knowledge of how Java compilers work, allowing an attacker to take control of the compiler.

AMD need not apply

---

<div class="post-metadata">

### Author: ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)
#### Post date: [July 16, 2008, 12:40pm UTC](https://forums.speedlife.net/t/uh-oh-exploit-effects-windows-linux-and-apple/51589/2 "2008-07-16T12:40:30Z")

</div>

meh

If Intel has issues…AMD will likely have similar issues…will be interesting to see the PoC.

---

<div class="post-metadata">

### Author: ![itsJim](https://avatars.discourse-cdn.com/v4/letter/i/c67d28/32.png) [@itsJim](https://forums.speedlife.net/u/itsJim)
#### Post date: [July 16, 2008, 1:30pm UTC](https://forums.speedlife.net/t/uh-oh-exploit-effects-windows-linux-and-apple/51589/3 "2008-07-16T13:30:37Z")

</div>

javascript or tcp/ip? pretty wide range of technologies… i think they mean java… either that or this whole article is bs… javascript would have to be on a per browser basis.

---

<div class="post-metadata">

### Author: ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)
#### Post date: [July 16, 2008, 1:32pm UTC](https://forums.speedlife.net/t/uh-oh-exploit-effects-windows-linux-and-apple/51589/4 "2008-07-16T13:32:46Z")

</div>

Its processor based…they are used tcp/ip/java to get them to issue what ever malicious data to the processor.

---

<div class="post-metadata">

### Author: ![itsJim](https://avatars.discourse-cdn.com/v4/letter/i/c67d28/32.png) [@itsJim](https://forums.speedlife.net/u/itsJim)
#### Post date: [July 17, 2008, 7:11am UTC](https://forums.speedlife.net/t/uh-oh-exploit-effects-windows-linux-and-apple/51589/5 "2008-07-17T07:11:54Z")

</div>

Yeah, its processor based so why is it limited to javascript? I don’t think you can even execute byte code with javascript…

---

<div class="post-metadata">

### Author: ![Dr.Stevil](https://avatars.discourse-cdn.com/v4/letter/d/da6949/32.png) [@Dr.Stevil](https://forums.speedlife.net/u/Dr.Stevil)
#### Post date: [July 17, 2008, 7:27am UTC](https://forums.speedlife.net/t/uh-oh-exploit-effects-windows-linux-and-apple/51589/6 "2008-07-17T07:27:32Z")

</div>

^ I assume because it platform independent

I really don’t know about the technical details though

---

<div class="post-metadata">

### Author: ![itsJim](https://avatars.discourse-cdn.com/v4/letter/i/c67d28/32.png) [@itsJim](https://forums.speedlife.net/u/itsJim)
#### Post date: [July 17, 2008, 8:02am UTC](https://forums.speedlife.net/t/uh-oh-exploit-effects-windows-linux-and-apple/51589/7 "2008-07-17T08:02:21Z")

</div>

javascript isn’t executed by the OS though, its ran through the browsers javascript engine… The engine would have to be broken on every single browser if that was the case. Now if they are talking about java, that is OS independent, and can execute byte code. Two completely different technologies, you would think that a security research firm or whatever would know that…

Edit: read the article, im pretty sure they are talking about java and NOT javascript
