2 ms·
With Spectre we discovered that not even VMs are adequate security boundaries. My opinion: want security? Separate (bare metal) machines. Period.
by worewood 5y ago
With Spectre we discovered that not even VMs are adequate security boundaries.
My opinion: want security? Separate (bare metal) machines. Period.
- userbinator 5y ago...and in the spirit of the parent comment, Intel didn't intend for protected mode to be a security boundary either. The 286 and 386 programming manuals referred to the protections as a form of reducing the severity of bugs.