3 ms·
Please see the comment I linked about Spectre specifically: https://news.ycombinator.com/item?id=18280156 https://news.ycombinator.com/item?id=18280156 I actua
by kentonv 8y ago
Please see the comment I linked about Spectre specifically: https://news.ycombinator.com/item?id=18280156 https://news.ycombinator.com/item?id=18280156
I actually think our approach to Spectre -- focusing on preventing the observation of the side channel, rather than blocking speculation -- is likely to be more robust against Spectre variants that haven't been revealed yet. Case in point, we developed some of our core mitigations before we knew about Spectre at all.
Spectre affects containers and VMs too.
- azinman2 8y agoSpecter is one class of side channel attack. When you’re in process, I presume there will likely be many more. I meant it as a more general question.