On 2020-06-12 00:47, joe mcguckin wrote:
> Yes, of course they have internet connections, but I don't run virtualization
> software. It's my understanding that most of these 
> bugs have to do with information leaking from one process or VM to another or
> with a process trying to escape from it's user process into a higher 
> privileged one.  If simply being connected to the internet is risky enough 
> that
> your machine can be compromised, there's more of a problem here than a cpu 
> bug.

Yes, the original play down by Linus proved to be a bad move, like the SMT
default has/will! Just like embargos measured in months (latest is something
like a year or more!) while smaller players are kept in the dark for no good
reason. Who then have to work under pressure before POC that bad guys have
probably acquired for ages, are being released.

An OS uses privileges for everything!

"https://www.redhat.com/en/blog/thoughts-netspectre";

"NetSpectre proves the danger of jumping to conclusions (although the current
observed access rates to unauthorized data are slow as noted below). The
brilliant team of researchers at TU Graz in Austria have once again demonstrated
a completely novel attack."

"https://misc0110.net/web/files/netspectre.pdf";

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/golang-nuts/ec9c0c0a-675b-edd0-303d-276de1f9b281%40gmail.com.

Reply via email to