News for hackers. Stuff that matters.

A comment on Microsoft Offers Bug Bounty to Prevent Another Spectre-Meltdown Fiasco. Parent comment

Re:Microsoft Offers Bug Bounty to Prevent Another Spectre-Me... by loosescrews on Saturday March 17, 2018 @05:05PM (#16609060)
These bugs are probably most valuable against cloud providers (Where else do you get arbitrary code execution on a machine with other's valuable data on it?). Most cloud providers run Linux, not Microsoft (except Microsoft) and definitely not Apple.
[ Parent | on HN ]
Re:Microsoft Offers Bug Bounty to Prevent Another Spectre-Me... by foobarian on Saturday March 17, 2018 @05:16PM (#16609097)
The problem is that even if there is no practical exploit, you still have to patch. At our web company where there are no shared boxes we still spent untold resources upgrading kernels, rebooting servers, and then lost capacity due to performance degradations.

Infrastructure is normally patched and rebooted on a regular schedule, but when a bug like this hits and requires an off-cycle upgrade it's a big cost.

[ Parent | on HN ]
Re:Microsoft Offers Bug Bounty to Prevent Another Spectre-Me... by gopalakrishnans on Saturday March 17, 2018 @06:09PM (#16609305)
Microsoft does have a lot of Linux VMs https://azure.microsoft.com/en-us/services/virtual-machines/
[ Parent | on HN ]
Re:Microsoft Offers Bug Bounty to Prevent Another Spectre-Me... by loosescrews on Sunday March 18, 2018 @01:18AM (#16610548)
What matters is the host OS, not the guest.
[ Parent | on HN ]
Re:Microsoft Offers Bug Bounty to Prevent Another Spectre-Me... by guscost on Saturday March 17, 2018 @05:07PM (#16609064)
Microsoft also runs the second largest cloud provider in the world.
[ Parent | on HN ]