4 ms·

Sorry, Dang fixed it up and told me to stop posting so many different links as new submissions. So I'll add a good list here: * https://comsec.ethz.ch/research

Sorry, Dang fixed it up and told me to stop posting so many different links as new submissions. So I'll add a good list here: * https://comsec.ethz.ch/research/microarch/retbleed/ https://comsec.ethz.ch/research/microarch/retbleed/ * https://comsec.ethz.ch/wp-content/files/retbleed_sec22.pdf https://comsec.ethz.ch/wp-content/files/retbleed_sec22.pdf * https://www.youtube.com/watch?v=dmSPvJxPm80 https://www.youtube.com/watch?v=dmSPvJxPm80 * https://arstechnica.com/information-technology/2022/07/intel-and-amd-cpus-vulnerable-to-a-new-speculative-execution-attack/ https://arstechnica.com/information-technology/2022/07/intel... * https://www.theregister.com/2022/07/12/amd_intel_retbleed/ https://www.theregister.com/2022/07/12/amd_intel_retbleed/ * https://www.phoronix.com/scan.php?page=news_item&px=RETBLEED https://www.phoronix.com/scan.php?page=news_item&px=RETBLEED * https://regmedia.co.uk/2022/07/12/handout_retbleed_amd.pdf https://regmedia.co.uk/2022/07/12/handout_retbleed_amd.pdf * https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/advisory-guidance/return-stack-buffer-underflow.html https://www.intel.com/content/www/us/en/developer/articles/t... * https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ce114c866860aa9eae3f50974efc68241186ba60 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin... * https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00702.html https://www.intel.com/content/www/us/en/security-center/advi... * https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00707.html https://www.intel.com/content/www/us/en/security-center/advi...

usr1106 4y ago
I believe according the HN rules original sources should be preferred over journalistic coverage. But given the fact that probably a minority here will greatly benefit from the academic paper or the patches, I'd say the Arstechnica article is an excellent compromise. Edit: The article is well-written IMHO, but I nearly did classify "sends scrambling" in the title as clickbait not worth opening.
- pvg 4y ago
  preferred over journalistic coverage. That's not in HN's rules - original sources are preferred but often good reporting is the best source especially when the thing being reported has multiple sources. The goal is really quality rather originalness.
  - usr1106 4y ago
    Ah, I remembered the wording wrong. It says: > Please submit the original source. If a post reports on something found on another site, submit the latter. Yours seems to be an interpretation, too.
    - pvg 4y ago
      It's an interpretation you can find a lot of support for in the dangscripture.
ndesaulniers 4y ago
Also: https://usercontent.irccloud-cdn.com/file/SslYH25a/mifune_vs_retbleed.gif https://usercontent.irccloud-cdn.com/file/SslYH25a/mifune_vs...

usr1106 4y ago

I believe according the HN rules original sources should be preferred over journalistic coverage. But given the fact that probably a minority here will greatly benefit from the academic paper or the patches, I'd say the Arstechnica article is an excellent compromise. Edit: The article is well-written IMHO, but I nearly did classify "sends scrambling" in the title as clickbait not worth opening.

pvg 4y ago
preferred over journalistic coverage. That's not in HN's rules - original sources are preferred but often good reporting is the best source especially when the thing being reported has multiple sources. The goal is really quality rather originalness.
- usr1106 4y ago
  Ah, I remembered the wording wrong. It says: > Please submit the original source. If a post reports on something found on another site, submit the latter. Yours seems to be an interpretation, too.
  - pvg 4y ago
    It's an interpretation you can find a lot of support for in the dangscripture.

ndesaulniers 4y ago

Also: https://usercontent.irccloud-cdn.com/file/SslYH25a/mifune_vs_retbleed.gif https://usercontent.irccloud-cdn.com/file/SslYH25a/mifune_vs...