The Patching Friars' AlmanacA calendar of CVE saints

March 6

SMoTherSpectreHoly card for smotherspectre, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 SMoTherSpectre SALTUM AUDIT
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Blessed SMoTherSpectre, Who Listened to the Branch

Patron of branch prediction, processors that guess, and secrets that leak through timing.

Life

On 6 March 2019 a group of researchers from EPFL and IBM presented SMoTherSpectre, a variant of the speculative-execution vulnerabilities. By pushing the processor to predict an indirect branch toward a chosen code fragment, and carefully measuring how long it took to run, bits of another program's confidential data could be inferred, exploiting the contention between execution units.

Prayer

O Blessed SMoTherSpectre, who listens for secrets in the rhythm of branches, keep our processors from guessing what they shouldn't. Amen.

How to celebrate

Celebrated by applying the Spectre mitigations, hardening the boundaries between programs, and measuring twice before trusting timing.

Guess the branch, and you eavesdrop on the thought.

Technical record

Disclosed on
March 6 2019
CVE
No CVE: blessed, not yet canonized by MITRE

Sources: nebelwelt.net · arxiv.org

Also remembered today

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

Saints:Google CalendarApple, Outlook and others (.ics)

Observances (feasts, scourges and miracles):Google CalendarApple, Outlook and others (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.