ZombieLoad: Cross Privilege-Boundary Data Leakage on Intel CPUs

Re:ZombieLoad: Cross Privilege-Boundary Data Leakage on Inte... by XorNot on Tuesday May 14, 2019 @06:27PM (#19914433)

Except that's objectively wrong - x86 virtualization breakouts have been extremely rare in practice, and fixable till recently.

The new class of attacks we now see target any type of shared code execution environment. OpenBSD is as vulnerable to this as anything else.

[ Parent | on HN ]

Re:ZombieLoad: Cross Privilege-Boundary Data Leakage on Inte... by astrange on Tuesday May 14, 2019 @11:36PM (#19916198)

OpenBSD disables hyperthreading, doesn't it? That's a smart defense against at least one of today's attacks. Doesn't help if you're a VM guest, but does if you're the host.

[ Parent | on HN ]

Re:ZombieLoad: Cross Privilege-Boundary Data Leakage on Inte... by redrabbyte on Wednesday May 15, 2019 @07:58PM (#19924957)

there's a foreshadow-ng variant specifically for vms, and it's arguably the worst

[ Parent | on HN ]