3 ms·
Yes but the Firecracker VMs are pinned to specific cores. So no two tenants never share a CPU core. Other than Rowhammer, has there been a hardware vulnerabilit
by insanitybit 3y ago
Yes but the Firecracker VMs are pinned to specific cores. So no two tenants never share a CPU core. Other than Rowhammer, has there been a hardware vulnerability of this nature that has worked x-core? I don't recall.
Still, I think that if your company is handling user data it's worth seriously considering dedicated instances for any service that encounters plaintext user information.
- fulafel 3y agoInteresting. Physical cores or SMT virtual cores? Is there a link to their docs about this?
- insanitybit 3y agoI honestly think I only ever saw an AWS Security Eng tweet about it lol sorry
- skeggse 3y agohttps://docs.aws.amazon.com/whitepapers/latest/security-design-of-aws-nitro-system/the-ec2-approach-to-preventing-side-channels.html https://docs.aws.amazon.com/whitepapers/latest/security-desi... seems like the relevant docs?