News for hackers. Stuff that matters.

A comment on The mysterious case of the Linux Page Table Isolation patches. Parent comment

Re:The mysterious case of the Linux Page Table Isolation pat... by saas_co_de on Monday January 01, 2018 @04:04PM (#16048030)
Get off the cloud. Which is exactly why the companies involved would want to keep it secret.

Not everyone is all in on cloud infrastructure. What about people who are right now deciding whether or not to move critical data to the cloud? Should their security be compromised by hiding the truth about a known exploit in order to "protect" people less concerned about security who already put their data at risk?

[ Parent | on HN ]
Re:The mysterious case of the Linux Page Table Isolation pat... by yeukhon on Monday January 01, 2018 @10:05PM (#16049544)
How is Netflix going to move off the cloud overnight?

If this vulnerability applies regardless of where it is, what is the mitigation then? Move your machine to where? Your suggestion is not practical and you know it. The right mitigation is one that actually will fix the vulnerability. No one shut down machines and migrated everything to another distro because Debian had a bug in generating private key a decade ago even if the bug was zero-day.

[ Parent | on HN ]