2 ms·
hmmm. Does this not assume that a cpu is shared among exactly 2 tenants over a long period of time? And can‘t the cloud provider simply block access to the cpu
by DarkNova6 3y ago
hmmm. Does this not assume that a cpu is shared among exactly 2 tenants over a long period of time?
And can‘t the cloud provider simply block access to the cpu api? Like they don’t allow you to create your own threads?
Just trying to understand this.
- johncolanduoni 3y agoA VM cloud provider can't block you from running at least one thread, which is all the malicious threads required for this attack. However none of the big cloud providers share CPU cores between users to combat exactly this kind of thing. I really wish the people that did these disclosures were more up-front about this, instead of saying vague things like "frequently happens on modern-day computers". Though I guess you can assume that if an attack would work on AWS the researcher would definitely mention it, so the lack of such an explicit claim almost ensures the attack is not viable on major clouds.