Aaand suddently VM-exit latencies on Intel CPUs will go through the roof, oh, and if you're still putting different guests on sibling hyperthreads you're going to get pwned and you know it. Good job, Intel. You saved a few AND gates. Was it worth it? https://www.redhat.com/en/blog/understanding-l1-terminal-fault-aka-foreshadow-what-you-need-know …
Yes, the issue is that nobody considered the existence of those side channels. This whole saga is basically CPU manufacturers discovering that timing side channel attacks apply to them as well.
-
-
Once you consider that, the entire presumed security model of modern speculative execution crumbles. HT was always broken (it's weird nobody has panicked over it earlier - you can attack HT *without* any speculation), but this is new.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.