News for hackers. Stuff that matters.

A comment on Cloud companies consider Intel rivals after security flaws found. Parent comment

Re:Cloud companies consider Intel rivals after security flaw... by bestham on Saturday January 13, 2018 @03:30AM (#16138752)
I don’t think it works like that. You still need protection between the rings inside the VM and the CPU is providing that protection. The VM is not only a user process for the host, it is executing its kernel code in the virtualized ring 0 on the CPU (where its still the CPU that provides protection).
[ Parent | on HN ]
Re:Cloud companies consider Intel rivals after security flaw... by jordanthoms on Sunday January 14, 2018 @08:35PM (#16147797)
As i understand it, with this approach you wouldn't have a separation between kernel code and the virtual machine - everything runs in a single address space and you rely on the virtual machine verifying the code as it JITs it.
[ Parent | on HN ]