2 ms·
Sounds like the only solution would be to enable speculative execution on a per-process basis. Something like Visual Studio and it's child processes, core Windo
by sebazzz 8y ago
Sounds like the only solution would be to enable speculative execution on a per-process basis. Something like Visual Studio and it's child processes, core Windows processes and the kernel may fully use branch prediction. "Trusted processes" so to speak. The Web browser, not so much, so no branch prediction, no side channel.
Perhaps new cpu instructions?
- nspex - No SPeculative EXecution from here
- espex - Enable SPeculative EXecution from here
- jlebar 8y ago> Something like Visual Studio and it's child processes, core Windows processes and the kernel may fully use branch prediction. Even that does not work. If the kernel can do speculative execution and user code can cause the kernel to do work (that's kind of the kernel's job), then user code can cause the kernel to leak secret data. This was one of the first set of attacks.