4 ms·

As I've said before, these announcements could benefit from better "action items" or "TLDR" for the average person with other problems to think about. What libr

As I've said before, these announcements could benefit from better "action items" or "TLDR" for the average person with other problems to think about. What libraries are affected, what do I need to upgrade exactly, on Ubuntu, etc etc. And I'm guessing this is intended to reach those people (among others) given the effort they put into the graphics, etc. In this case. "Am I affected?" "Likely, yes. It's on all the CPUs". Okay, but how does this work exactly? Is the Hertzbleed going to take over my computer and steal my private keys from my hard drive? Do I need to be running a server? Do I need to be in the middle of a cryptographic operation with the key in question? Etc. "What is the impact" Ah, this sounds like the useful part. "...modern x86 cpus... side channel attacks...power consumption...constant-time execution". Nope, this isn't it either. I think this is simply a matter of being so deeply embedded in something, one forgets how much is assumed. If they showed it to an outsider first they'd get the necessary feedback.

bruce343434 4y ago
I got the same feeling, how does this apply to me?
IfOnlyYouKnew 4y ago
There really isn't anything for the "average person" to do here, who wouldn't understand any of your questions, either (the library? The one with all the dirty books?)
- orblivion 4y ago
  What about the average reasonably computer savvy person? Also "don't worry about it" or "there's nothing you can do for now" is an answer.
orblivion 4y ago
I'm sorry, sometimes (often) it's my reading comprehension. The answer I was looking for was in the first f-ing paragraph. (And I checked archive.org, it was there yesterday) "In the worst case, these attacks can allow an attacker to extract cryptographic keys from remote servers that were previously believed to be secure." I'll probably have more to complain about the messaging when a fix comes out, but for now mea culpa.

bruce343434 4y ago

I got the same feeling, how does this apply to me?

IfOnlyYouKnew 4y ago

There really isn't anything for the "average person" to do here, who wouldn't understand any of your questions, either (the library? The one with all the dirty books?)

orblivion 4y ago
What about the average reasonably computer savvy person? Also "don't worry about it" or "there's nothing you can do for now" is an answer.

orblivion 4y ago

I'm sorry, sometimes (often) it's my reading comprehension. The answer I was looking for was in the first f-ing paragraph. (And I checked archive.org, it was there yesterday) "In the worst case, these attacks can allow an attacker to extract cryptographic keys from remote servers that were previously believed to be secure." I'll probably have more to complain about the messaging when a fix comes out, but for now mea culpa.