The Patching Friars' AlmanacA calendar of CVE saints

November 10

PlatypusHoly card for platypus: official logo by Natascha Eibl (CC0 1.0), frame generated with AI (Claude, Anthropic).CC BY-NC-SA 4.0; logo CC0 1.0 Platypus WATTA PRODUNT
Official logo by Natascha Eibl (CC0 1.0) · 🤖 frame and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint Platypus, Who Spied From the Power Readings

Patron of CPU energy meters, SGX enclaves, and everyone who thought a wattmeter could not betray a secret.

Life

On 10 November 2020 a group of European researchers presented Platypus: Intel processors' RAPL interface, meant to measure power draw, was precise enough to reveal which data the CPU was processing. From an ordinary account, with no physical tools, one could reconstruct cryptographic keys and even peek inside SGX enclaves, watching only how the energy varied. Intel and Linux restricted access to the power readings.

Prayer

O Saint Platypus, who reads secrets in the beat of the watts, let our meters not tell what we compute. Amen.

How to celebrate

Celebrated by updating microcode and kernel to limit RAPL readings to the privileged only.

Even the power draw tells what you are thinking.

Technical record

Disclosed on
November 10 2020
CVE
CVE-2020-8694CVE-2020-8695
Product
Intel(R) Processors

Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Sources: platypusattack.com

Also remembered today

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.