Re:LLVM patch to fix half of Spectre attack
by Dylan16807 on Thursday January 04, 2018 @01:55PM
(#16072978)
> I think the only real fully-encompassing solution to this is a redesign in how we use computers.
You can do a lot by separating these speedup mechanisms across security boundaries. The biggest factor that makes this hard to mitigate is in-process security boundaries. Total isolation between processes is neither necessary nor sufficient.
You can do a lot by separating these speedup mechanisms across security boundaries. The biggest factor that makes this hard to mitigate is in-process security boundaries. Total isolation between processes is neither necessary nor sufficient.