3 ms·
>I would [..] host untrusted customers in [...] Xen HVM any day. Intel doesn't recommend running untrusted code even in a separate VM, according to their offic
by NullPrefix 6y ago
>I would [..] host untrusted customers in [...] Xen HVM any day.
Intel doesn't recommend running untrusted code even in a separate VM, according to their official explanation of Spectre/Meltdown. At least we can do it on RPi now.
- pengaru 6y ago> At least we can do it on RPi now. Couldn't we already do it on an RPi with linux/kvm+qemu?
- SturgeonsLaw 6y agoNot to mention if you give the untrusted VM a network interface then it can be the equivalent of plugging an untrusted computer into your network
- emteycz 6y agoHuh? You can't make a VLAN or use a firewall?
- s1dev 6y agoThe A72 has speculative execution so I don’t think that’s strictly speaking true