4 ms·
Doesn't appear to be, additionally Windows deployments are not affected. Per Intel - "Note that Windows systems are not affected given that these systems use I
by trdtaylor1 4y ago
Doesn't appear to be, additionally Windows deployments are not affected.
Per Intel - "Note that Windows systems are not affected given that these systems use Indirect Branch Restricted Speculation (IBRS) by default which is also the mitigation being made available to Linux users."
- olliej 4y agoIt appears to be an attack specifically on the retpoline approach the Linux used to prevent the original specter attacks. Given it appears that Linux is the only OS that took that approach they’re the only one vulnerable? (The article explicitly calls out Linus ignoring warnings about this possibility)
- gpderetta 4y agoLinux claimed it was not practical. Is this attack actually practical? Are 200-3kb/s sufficient for a realistic attack?
- holycrapwhodat 4y ago> Are 200-3kb/s sufficient for a realistic attack? Yes.
- marshray 4y agoSo how many seconds would it take to leak your password at that rate?
- olliej 4y agoPer the article 5-7 minutes for the root hash on the effected AMD systems? I'm guessing that's also not doing any kind of actual targeted traversal because if you can just do a heap walk you don't need anywhere near that amount of data.
- pishpash 4y agoFirst dialup connections were 1200bps. Earlier adhoc connections were lower.
- staticassertion 4y agoSomeone should create an index of "Linus said this attack was impractical/ unimportant". I can think of a number of great examples off the top of my head.