News for hackers. Stuff that matters.

A comment on Cloud companies consider Intel rivals after security flaws found. Parent comment

Re:Cloud companies consider Intel rivals after security flaw... by pishpash on Saturday January 13, 2018 @06:17AM (#16139134)
AMD has the same issues. The difference in Meltdown, according to the paper, comes down to idiosyncratic peculiarities of timing differences, not anything fundamentally more sound in other processors.
[ Parent | on HN ]
Re:Cloud companies consider Intel rivals after security flaw... by contrarian_ on Saturday January 13, 2018 @06:20AM (#16139146)
WRONG. You fell for the Intel PR strategy. AMD is completely unaffected by Meltdown, since AMD checks permissions before fetching memory into the cache.
[ Parent | on HN ]
Re:Cloud companies consider Intel rivals after security flaw... by wohlergehen on Saturday January 13, 2018 @06:44AM (#16139215)
Section 6.4 of the Meltdown paper seems to indicate that the same flaw is present in AMD CPUs, but not easily exploitable.

Do you have a different source for that?

[ Parent | on HN ]
Re:Cloud companies consider Intel rivals after security flaw... by contrarian_ on Saturday January 13, 2018 @07:31AM (#16139352)
The toy example referenced in section 6.4 is actually closer to Spectre. It's missing the crucial distinction that the speculatively loaded address should belong to a page inaccessible from the current ring level.

To see why that toy example is insufficient, consider that you could simply execute the load directly without putting an exception in front of it and you would be able to read the value.

[ Parent | on HN ]