Re:Cloud companies consider Intel rivals after security flaw...
by DSingularity on Saturday January 13, 2018 @07:55AM
(#16139424)
Nice thoughts but the vulnerabilities of Spectre and Meltdown do not directly threaten code which runs on the vulnerable CPU. Instead, the vulnerabilities allow malicious code running on the vulnerable CPUs to attack the system and other apps. A subtle difference, but makes the job to identify the applications which are not trustworthy and avoid running them on the performant but potentially vulnerable cores.
[ Parent
| on HN ]
Re:Cloud companies consider Intel rivals after security flaw...
by egwor on Saturday January 13, 2018 @08:02AM
(#16139443)
If every application were signed (like on the apple store), does that help reduce the risk here? If it were a game server then all apps run would presumably be provided by some official third party who could be relied upon to sign the binary.
If it were all signed, then is the risk of the box becoming compromised fairly small and worst case, replacing the entire box (rebuild) if there were an issue could address problems quickly?
[edit to make it clear that this is a question]
Re:Cloud companies consider Intel rivals after security flaw...
by lixtra on Saturday January 13, 2018 @10:52AM
(#16139981)
If the application can run sufficient complex arbitrary code it is not safe. Example: Safari with JavaScript JIT compilation.
Re:Cloud companies consider Intel rivals after security flaw...
by bradleyjg on Saturday January 13, 2018 @12:28PM
(#16140320)
It is my understanding that any sort of cloud setup would be completely out. Also, anything with a web-browser or other platform that runs third party code. But that still leaves an awful lot of servers that are under the control of a single company or individual and don't run any untrusted code (sandboxed or otherwise), doesn't it?