Yes. There is, quite literally, *no* way to ensure data is not leaked (namely, t... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

TheLoneWolfling on June 12, 2015 | parent | context | favorite | on: Being Sneaky in C

Yes.

There is, quite literally, no way to ensure data is not leaked (namely, that data is zeroed / etc) in portable C / C++.

alain94040 on June 13, 2015 [–]

Or in assembly, for that matter. You never what data the CPU is duplicating behind your back: store buffers, prediction, etc.

TheLoneWolfling on June 13, 2015 | [–]

At least with assembly most of the time you can't ever get that data back. Although not always.

With C it's far too easy to get the data back.

Also, you missed the worst example: CPU cache.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact