The Patching Friars' AlmanacA calendar of CVE saints

March 21

GoFetchHoly card for gofetch: official logo by GoFetch authors (CC0 1.0), frame generated with AI (Claude, Anthropic).CC BY-NC-SA 4.0; logo CC0 1.0 GoFetch ADFERT ARCANA
Official logo by GoFetch authors (CC0 1.0) · 🤖 frame and text generated with AI

⬇ Download holy card: ·

Embed on your site

Blessed GoFetch, Who Fetched the Keys From the Prefetcher

Patron of Apple Silicon processors, over-eager prefetchers, and cryptographic keys in memory.

Life

In March 2024 a group of researchers from several universities presented GoFetch, an attack on Apple's M-series chips. A particular prefetcher, meant to guess which data will be needed, treated certain values as if they were addresses and loaded them ahead of time; by watching this behaviour, a malicious program on the same machine could reconstruct, little by little, the keys used by some cryptography libraries. The flaw is in the silicon, so it can only be mitigated with care in software.

Prayer

O Blessed GoFetch, who fetches what he shouldn't, teach our prefetchers not to touch the secrets. Amen.

How to celebrate

Celebrated by updating cryptographic libraries with the countermeasures and keeping secrets away from unwanted guests.

Fetch too much, and you bring back the secrets too.

Technical record

Disclosed on
March 21 2024
CVE
No CVE: blessed, not yet canonized by MITRE

Sources: gofetch.fail · architecture.fail

Also remembered today

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.