4 ms·
intel is just fine. spectre and meltdown were blown way out of proportion. almost every CPU to date has had similar vectors to exploit them or worse. if intelli
by vectorEQ 9y ago
intel is just fine. spectre and meltdown were blown way out of proportion. almost every CPU to date has had similar vectors to exploit them or worse. if intelligence agencies don't know this they have shitty assurance and should get better. most agencies for high integrety systems wont have been using intel/amd as there are cpus out there (ibm for example) which offer much better assurance with regards to memory integrity etc.
that being said, government is a tiny market compared to businesses (cloud providers etc. etc.) so really if they all switch to ibm or so intel still wouldn't be in trouble. it would be a tiny bump in the road.
- a1xndr 9y agoI don't see how Spectre and meltdown were blown way out of proportion? Google and Amazon seem to have treated them quite seriously.. Maybe they should have just closed their eyes. The solution to Spectre right now is "Don't do speculative execution". Meltdown exploits a pretty embarrassing bug in the hardware. One has to wonder how it got through all of the testing/review that must happen before a new design is sent off to a fab($$$). Don't forget that there are 30+ class action lawsuits filed against Intel due solely to these bugs.
- AnIdiotOnTheNet 9y agoMost people who run servers aren't cloud hosts, so they're not running untrusted code on their servers in the first place, making Spectre/Meltdown pretty much a non-issue. These sorts of issues were discovered a decade ago when speculative execution first hit the scene, we just never had a practical exploit (in public knowledge anyway) until recently, and even then it really isn't that bad despite all the security apocalypticists shouting that the end was nigh.
- DocTomoe 9y ago> so they're not running untrusted code on their servers in the first place Oh sweet summer child.