Re:Founder of GenodeLabs OS framework discusses impact of Me...
by contrarian_ on Saturday January 06, 2018 @07:32AM
(#16084996)
No no no, you can easily train the branch predictor by sending a bunch of valid requests followed by an invalid request with a payload that redirects the ensuing speculative load into your desired address range.
[ Parent
| on HN ]
Re:Founder of GenodeLabs OS framework discusses impact of Me...
by bennofs on Saturday January 06, 2018 @02:20PM
(#16086945)
Yes, but to do that, your code needs to use the same branch predictor as the victim code. If the branch prediction buffer is per-core and not shared among multiple cores, then that means you have to run on hte same core as the kernel. If the kernel always runs on a different core, you cannot do anything.