過一個晚上沒看到有人 po
"CrossTalk" / SRBDS Is The Newest Side-Channel Vulnerability
https://bit.ly/2XQkFfg
CrossTalk/SRBDS Shows Possibility Of Leaking Information Across Physical CPU
Cores
https://bit.ly/3dMOa7e
Intel 已經釋出給 Linux 用的 microcode (Haswell 到 Coffee Lake)
RdRand Performance As Bad As ~3% Original Speed With CrossTalk/SRBDS
Mitigation
https://bit.ly/2Yl2ME5
新的 microcode 把硬體亂數產生器的效能降到剩 3%
不過對一般 user 應該是沒差
後續消息有興趣就自己追 phoronix 吧
--
All Comments