3 ms·
Clouds take these vulns seriously, and have a lot to lose, and have deep wallets. I'd be surprised if this topic didn't come up when large purchases are discuss
by peddling-brink 3y ago
Clouds take these vulns seriously, and have a lot to lose, and have deep wallets. I'd be surprised if this topic didn't come up when large purchases are discussed.
Not that there are many alternatives..
- CanaryLayout 3y agoThey have workarounds. If you prevent multi-tenant from sharing their threads on the same core, that eliminates the most desirable goal of an attacker. However it does not eliminate the vulnerability within a single tenants own threads. You also have to think about all the web shops that are out there that are just running proxmox or a cloud reseller who reintroduces the vulnerability in their multicore VPS setup
- ComodoHacker 3y agoAnd this flaw was found by researcher working for a cloud vendor. I wouldn't be surprised if they already have some special long-term agreements.
- yyyk 3y agoBig clouds have the exact same incentive issue - if a customer is really paranoid, the customer can pay the cloud extra and ensure their own exclusive infra. For regular users, the clouds can mitigate a bit at scale (but not care much about this in practice, it's not as important as cheaper faster processors).