The Thunderbolt attacks, ELI5 version Attack 1: if you break into my house, you can change my lock so it accepts a master key so you can come in later. Attack 2: if you break into my friend's house, and he has my keys, you can copy them and go into my house. Duh?
-
See here for an account of how historically broken this stuff is on Linux and how the solutions are still prioritizing performance over getting it obviously safely right.https://lwn.net/Articles/786558/ …
You don't have to tell me about drivers fucking up IOMMU mappings. That's how we owned the PS4. The solution isn't forcing bounce buffers on everything, it's better software frameworks for getting this right without just dumbly copying data.
-
-
If final destination is userspace you can't. Other data may be in same page. Based on the LWN summary I posted it looks like they're doing bounce buffer mappings only for first/last partial pages...
-
But only doing any of this for devices marked as having external connectors, which is
when GPU is biggest threat.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.