2 ms·
That works, sort of, but how do you even ensure the hardware is actually working? Trust Intel or ARM after what they've shown? And trying to fully bypass cache
by AstralStorm 7y ago
That works, sort of, but how do you even ensure the hardware is actually working? Trust Intel or ARM after what they've shown?
And trying to fully bypass cache and speculation when doing userspace to/from kernel transfers is going to suck. Remapping pages also. And if MMU is untrustworthy, well...
- monocasa 7y ago> That works, sort of, but how do you even ensure the hardware is actually working? Trust Intel or ARM after what they've shown? Which part are you referring to? > And trying to fully bypass cache and speculation when doing userspace to/from kernel transfers is going to suck. Remapping pages also. Here's a demonstration of doing it remotely, with specially crafted network packets. https://arxiv.org/abs/1807.10535 https://arxiv.org/abs/1807.10535 It's not as hard as you're making it seem, the root here is that hardware is currently broken. > And if MMU is untrustworthy, well... If the MMU is untrustworthy, it doesn't matter if you allow a cross domain VM or not.