3 ms·
> they'd never have even dreamed up Side channels in general have been known for a long, long time in mil and intel communities, so it is likely that folks the
by rphlx 9y ago
> they'd never have even dreamed up
Side channels in general have been known for a long, long time in mil and intel communities, so it is likely that folks there long ago identified and understood that it's a bad idea to share a single x86_64 core between multiple tenants in a public cloud, for example, even if this specific attack vector was not explicitly tagged & bagged.
- kakarot 9y agoI was under the assumption that it's worse than just sharing cores or servers. Even machines that do not share cores but share a common hypervisor are cross-vulnerable. From Wikipedia [0]: Spectre has the potential of having a greater impact on cloud providers than Meltdown. Whereas Meltdown allows unauthorized applications to read from privileged memory to obtain sensitive data from processes running on the same cloud server, Spectre can allow malicious programs to induce a hypervisor to transmit the data to a guest system running on top of it. However I have also read that Spectre is confined to userspace, so I'm not sure who is correct. [0] https://en.wikipedia.org/wiki/Spectre_(security_vulnerability)#Impact https://en.wikipedia.org/wiki/Spectre_(security_vulnerabilit...