News for hackers. Stuff that matters.
Re:“Intel Core 2 bugs will assuredly be exploitable from use... by agumonkey on Friday January 05, 2018 @04:19AM (#16077515)
same, and don't bother reading too much, the best bugs came after ...

incredible how I (we) ran on buggy hardware for so long.

We should fund a tiny group for sane cpu design.

Re:“Intel Core 2 bugs will assuredly be exploitable from use... by vanderZwan on Friday January 05, 2018 @12:50PM (#16080172)
The Mill computing people seem to have figured out quite a lot of elegant yet fast security solutions[0][1].

One simple example is the zero-bit. I don't have time to look up the exact details now, but IIRC, it's a simple hardware bit-flag that is part of the metadata of any value that can be read. If set, reading out that value returns zero. If not, it returns the actual value.

Data defaults to having the zero-bit set, and the only way to unset a zero bit is writing new data into whatever you want to read from. The exact mechanism is probably a bit different, but that's how I remember it.

Regardless of what the precise implementation is, the point is that by adding some smart hardware-based metadata like this in the form of bit-wise flags, you don't have to worry about having to manually wipe the data in memory once you are done with it (and have the speed benefits of not having to do so as well), yet still get all the safety benefits of never having to worry about buffer overflows and whatnot again.

[0] https://millcomputing.com/

[1] https://millcomputing.com/docs/security/

Re:“Intel Core 2 bugs will assuredly be exploitable from use... by busterarm on Friday January 05, 2018 @11:03AM (#16079383)
> We should fund a tiny group for sane cpu design.

It's happened, again and again. The ARM CPUs powering your phones are a good example. Maybe with more of a market, POWER9 prices might come down.

Re:“Intel Core 2 bugs will assuredly be exploitable from use... by agumonkey on Friday January 05, 2018 @11:21AM (#16079510)
Half recent application class arm core are affected.

They are saner but the problem is still here

Re:“Intel Core 2 bugs will assuredly be exploitable from use... by busterarm on Friday January 05, 2018 @12:17PM (#16079901)
I was more trying to point to RISC in general ("RISC is good" https://www.youtube.com/watch?v=wPrUmViN_5c). What I really wanted to say is that we've tried but RISC hasn't really been successful in the (mass consumer) market, which because of ARM is only partially true.

In truth you're correct, and ARM is sort of an unruly mess at this point, but that's a much larger discussion.

Re:“Intel Core 2 bugs will assuredly be exploitable from use... by equalunique on Friday January 05, 2018 @11:17AM (#16079477)
Order your Raptor Engineering Talos™ II now! Improved with PCI Express 4.0, CAPI 2.0, DDR4 RAM, & POWER9 CPU. https://raptorcs.com/TALOSII/
Re:“Intel Core 2 bugs will assuredly be exploitable from use... by agumonkey on Saturday January 06, 2018 @08:02AM (#16085099)
but power is not immune from this right ?
Re:“Intel Core 2 bugs will assuredly be exploitable from use... by equalunique on Friday January 12, 2018 @12:30PM (#16134573)
According to Raptor Engineering on Jan 5: "#POWER8 and prerelease variants of #POWER9 vulnerable to #Meltdown (CVE-2017-5754) and #Spectre (CVE-2017-5753 / CVE-2017-5715). #POWER9 is being patched and will not be vulnerable at ship, and there will be no performance loss versus current #POWER9 samples. Patches coming soon."[0]

[0] https://twitter.com/RaptorCompSys/status/949368929507520517

Re:“Intel Core 2 bugs will assuredly be exploitable from use... by alex_duf on Friday January 05, 2018 @07:53AM (#16078256)
That would be great.

I know nothing about low level programming, and I'm wondering if webassembly couldn't be a good place to start designing CPU instruction sets?

Can someone more competent on the matter tell me if this idea is crazy?

Re:“Intel Core 2 bugs will assuredly be exploitable from use... by protomikron on Friday January 05, 2018 @07:58AM (#16078270)
> Can someone more competent on the matter tell me if this idea is crazy?

Yes, it's crazy. :)

But seriously, the ISA (instruction set architecture) is not the problem, but the optimizations (deep pipelines and speculative execution, etc.) are.

Re:“Intel Core 2 bugs will assuredly be exploitable from use... by dboreham on Friday January 05, 2018 @11:34AM (#16079607)
The nature of the ISA can influence the kinds of optimizations undertaken.
Re:“Intel Core 2 bugs will assuredly be exploitable from use... by alex_duf on Friday January 05, 2018 @09:34AM (#16078767)
thanks!