3 ms·
Your first sentence is why part of hardening systems is getting down to a bare minimum footprint of installed software. To your second question, cloud vendors
by deliver8r 8y ago
Your first sentence is why part of hardening systems is getting down to a bare minimum footprint of installed software.
To your second question, cloud vendors are generally very happy to sell you threads instead of cores on multi-tennant hosts. So, almost certainly- if not with this attack, than with a Spectre variant or something as yet undiscovered/undisclosed. If you want to avoid that some let you pay extra for dedicated hardware.
- BeeOnRope 8y agoTo be fair, all of the standard host types that AWS offers, for example, are pairs of hyperthreads, so you are getting a dedicated CPU and are presumably not scheduled on the same core as a thread from another tenant. That is, unless Amazon has made some unusual scheduling decisions. I didn't check the other cloud providers.
- deliver8r 8y agoGiven that CPU steal remains an ongoing problem (ie, another tenant is eating into your instance's allocated processor share), on what do you base your implication that AWS is binding cores to specific VMs?