TL;DR on ZombieLoad: this is like L1TF, where the CPU is using "garbage" data during a fault instead of coercing to zero (except here it's data instead of addresses). It seems this is pervasive problem class across the design of Intel CPUs, not just a single instance.
-
Show this thread
-
Basically it seems their engineering teams have, until now, considered it acceptable to have known-to-fault instructions operate on *complete garbage*, ignoring *all* privilege rules, as long as they will never retire.
2 replies 3 retweets 32 likesShow this thread -
This is, of course, completely insane from a security perspective, and given that we're now acutely aware of speculation attacks, represents *many* different opportunities for leakage. L1TF and ZombieLoad are on a completely different class from Spectre/Meltdown.
2 replies 3 retweets 37 likesShow this thread -
Replying to @marcan42
gotta keep the single-threaded performance train going no matter what, I guess?
1 reply 0 retweets 1 like
Yeah, this is literally another case of "let's save ourselves a bank of AND gates to return 0 on faults".
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.