3 ms·
I don't think it was a complete success. An AMD engineer mentioned the nature of the vulnerability on lkml before the end of the embargo, even though AMD was a
by cwzwarich 9y ago
I don't think it was a complete success. An AMD engineer mentioned the nature of the vulnerability on lkml before the end of the embargo, even though AMD was a party to the embargo.
Of course, it was probably unwise to discuss the code changes implementing mitigations in public anyways, but I don't have first-hand knowledge of how these things work in the Linux world.
- mjevans 9y agoWasn't that also a reply to some part of this which had already surfaced to the public (but the impact maybe not known to the public).
- cwzwarich 9y agoThere was an email thread discussing page table isolation mitigations for some bug, but Tom Lendacky mentioned it was about speculation. This let many others finally connect the dots, despite the earlier discussion taking place in the open for a while. Until the connection with speculation was revealed, it could've just been another KASLR info leak defense.