5 ms·
> Resolved by software / OS updates to be made available by system vendors and manufacturers. Not unless you update every piece of code running on your machine
by kbwt 9y ago
> Resolved by software / OS updates to be made available by system vendors and manufacturers.
Not unless you update every piece of code running on your machine to insert an lfence following every branch on attacker-controlled data.
- all_blue_chucks 9y agoCare to explain? How is an OS update insufficient?
- fooker 9y agoFences in the code significantly slows down execution. While you can not avoid them altogether (modern processors are not sequentially consistent), the less you can use, faster your concurrent code is. This update makes the kernel insert fences into places where it wouldn't have been necessary before, leading to potentially severe slowdowns.