Zombieload: Another Intel CPU bug found

[Rroff]

Yep, says about all anyone really needs to know.

Interesting take there that potentially it should be possible to whitelist rather than just turn off HT.

I think AMD has something similar at software level currently where an application can be flagged to use certain mitigations against Spectre type attacks.

 

[Orange Nexus]

As normal practice, companies hold their shareholders above their customers. But, they know fully well, the customers are the ones that pay all of them.

https://www.nrc.nl/nieuws/2019/05/14/hackers-mikken-op-het-intel-hart-a3960208

 

[opethdisciple]

Personally I don't think these are just flaws in the microarchitecture of the chips but actually flaws by design by nefarious actors such as collusion between the US government, the NSA and Intel et al for the purpose of surveillance.

Eventually though these flaws have served their purpose which is why back in 2017 they have come to light and now they are trying to patch them. It's happened in the past where NSA surveillance toolkits (of which I cant remember the exact name) where leaked to the public, started being abused by third parties so they patched it.

Same with this. Just this is hardware, cpu and seemingly on an epic scale!