3 ms·

The post on lwn.net has some more context in the comments: https://lwn.net/Articles/1044867/ https://lwn.net/Articles/1044867/

• fn-mote 11mo ago
  Edit to add: no need to read the LWN comments, the article is crystal clear and to the point - no technical reading skills necessary (unlike some very involved Project Zero posts). - - - Make sure you get down to the comment by ardbiesheuvel, “linear map randomization was already broken”, past all the hot air about the lack of QA. This comment explains why hot pluggable memory causes issues with randomization. Now off to read the article.
  • scott_w 11mo ago
    I’m a bit confused by your edit and I’m glad I ignored it to read the comment you initially highlighted because it does offer a strong counter to the Project Zero article.
    • stefan_ 11mo ago
      There are some good points around how limited the entropy available here is, but it entirely skips over who the fuck needs hotplug memory in the first place. That is a very niche feature that has no application in the vast majority of devices and should never inform the defaults.
      • jmalicki 11mo ago
        It made it very clear - virtualization builds where memory can be dynamically added and removed by the emulator. I haven't done this with Android but it can be quite useful for running lots of test emulators, they can adapt their memory to the workload to not overwhelm the host.
        • stefan_ 11mo ago
          So you agree, it has no place or purpose when running on an actual device.
• deleted 11mo ago
  [deleted]