3 ms·
> If untrusted code is running on the same core/package/what have you, your security has already been breached. This goes against decades of OS design, possibl
by msla 6y ago
> If untrusted code is running on the same core/package/what have you, your security has already been breached.
This goes against decades of OS design, possibly all serious OS design once you pass over program loaders like MS-DOS and various ROM BASIC iterations. More to the point, there's enough advantages to being able to run untrusted code that a performance trade-off is worth it: If it comes down to being able to run your business at a penalty and having to close up shop, it doesn't take much to figure out what Amazon is going to do with AWS.
- rmrfstar 6y agoDoes Xen have an option like this? In this arena, advice for the "paranoid" has a habit of becoming conventional wisdom. [1] [1] https://www.theregister.co.uk/2018/06/20/openbsd_disables_intels_hyperthreading/ https://www.theregister.co.uk/2018/06/20/openbsd_disables_in...