4 ms·
Wouldn't most things need Hyperthreading off to be secure on Intel or is it fine if you have your own hardware?
by andy_ppp 7y ago
Wouldn't most things need Hyperthreading off to be secure on Intel or is it fine if you have your own hardware?
- sigio 7y agoThat's only fine if you know all code running in all parts (containers) on the same hardware node. Code running on one container can influence data/code from other containers. (When some third-party has a form of code execution)
- loeg 7y agoPrivilege-aware scheduling could colocate only same-container (or same-user, or same-process) threads on HT pairs.
- otakucode 7y agoTheir tests disabled hyperthreading on Intel due to the security concerns and also on AMD on speculation that security concerns might arise in the future (if I read everything correctly).