2 ms·
Security is always about raising the costs of breaking through security over what the value of what is being secured. If you find the page "over the top", it is
by jerf 4y ago
Security is always about raising the costs of breaking through security over what the value of what is being secured. If you find the page "over the top", it is not because the page is over the top, but because you don't have anything to secure that is in the cost range of the attacks being outlined. That's great. Personally, I at best have maybe one secret that is in that value range (and on the low end at that), and the vast majority of what I deal with day to day myself is not in that range. This is probably true for the vast majority of people reading this comment as well.
However, it is not true for everybody. When you're securing something very valuable, as some people do, those problems become a big deal. Some security researchers need to be working at that level, or people with those problems will just be helpless.
I have read all about this attack. I haven't touched any settings on my computer. It isn't a problem for me. But it is a problem for other people. You're just peering in on a world that you don't live in. It's kind of like asking "Who would ever need a bodyguard? Seriously?" Well, I can neither afford one, nor do I seem to particularly need one... but I'm not the only person or type of person in the world.
- scandinavian 4y ago> If you find the page "over the top", it is not because the page is over the top, but because you don't have anything to secure that is in the cost range of the attacks being outlined. The page states that *all users* should disable all dynamic clock states and that all OS creators should do the same by default. That's very different than the very obvious info you just shared and in my opinion extremely over the top. What attack scenario do you think *users* would be targeted with? Edit: Just to be clear, if you store state secrets, are a cloud provider or otherwise hosts services that could be targeted by hertzbleed, by all means gimp your CPU if your research tells you that it is important. There's just no reason to do so for the normal user and I think if you are in the class of people that need to secure something like that, it's narcissistic to believe they need to read the rant-ish site the OP posted to realize it.