> Once again it seems clear that running code from two security domains on the same physical processor cores is just not possible to get right, and we should pr

> Once again it seems clear that running code from two security domains on the same physical processor cores is just not possible to get right, and we should probably just stop doing it. I believe this is why OpenBSD disabled SMT by default in June of 2018. [0] It can still be enabled with a simple 'sysctl', though. [0] https://www.mail-archive.com/source-changes@openbsd.org/msg99141.html https://www.mail-archive.com/source-changes@openbsd.org/msg9...