Re: Spectre and Meltdown stupid question...

2018-01-15 Thread Carey Tyler Schug
In what I read, i didn't see any dependency on multiple cores, if so, it would be dependent on what was running in the other core, if the kernel didn't run there, no exposure.e AFAICS, you try to read something you are not allowed to. speculative execution does this, but then it gets canceled

Re: Spectre and Meltdown stupid question...

2018-01-15 Thread Henry Schaffer
I'm not sure whether I'm providing more of an answer or more of a question - but ... My understanding is that this "leakage" of data happens on the chip via access to cache - certainly on a core, i.e. between two threads running on the same core. I don't know about two different cores on the same

Re: Spectre and Meltdown stupid question...

2018-01-15 Thread Carey Tyler Schug
another stupid question. This is ONLY for Linux on z, correct? and only within one Linux instance?  If 200 copies of Linux are running under one z/vm, the only risk is within each of the Linux instances. Meaning accounting running in Linux #1 is not at risk from anything else running in any

Re: Spectre and Meltdown stupid question...

2018-01-15 Thread Martha McConaghy
Paul, The answer is "yes". A MCL for hardware came out last week. I believe it applies to models z14 down through z114. At least, our z13s, BC12 and z114 all received it. (We wanted it on as soon as possible.) In addition, there is a z/VM PTF, though I'm not sure it is out yet. Its z/VM 6.4

Re: Spectre and Meltdown stupid question...

2018-01-15 Thread Alan Altmark
You will not find answers here or in other social media. Please see the IBM Z Security Portal for information. Alan Sent from my iPhone using IBM Verse On Jan 15, 2018, 10:31:29 AM, dskw...@mindspring.com wrote: From: dskw...@mindspring.com To: LINUX-390@VM.MARIST.EDU Cc: Date: Jan

Re: Spectre and Meltdown stupid question...

2018-01-15 Thread Dan Skwire
Paul, you have asked what, last century, used to be called, the “64 thousand dollar question” (“$64K”). In any case, it sure is a big question. We are all awaiting the official answer, no matter which operating system we favor (z/Linux, z/VM, z/VSE, z/TPF, or, my favorite, z/OS). Some think

Spectre and Meltdown stupid question...

2018-01-15 Thread Paul Flint
Greetings List Lurkers, I may have missed the discussion, as I have been enjoying an old fashion New England Flu (not to be missed :^). So can CPU data cache timing in IBM z series hardware be abused to efficiently leak information, and if so what can be done about it? Kindest Regards,