News for hackers. Stuff that matters.
Re:BleedingTooth: Linux Bluetooth Zero-Click Remote Code Exe... by nimbius on Wednesday April 07, 2021 @02:32PM (#26728974)
oof.

from the guys who brought you "the spectre patch in the kernel thats disabled by default" and "ignore your doubts, hyperthreading is still safe" comes "the incredible patch built solely around shareholder confidence and breakroom communication"

EDIT: spectre, not meltdown. oops.

https://www.theregister.com/2018/11/20/linux_kernel_spectre_...

Re:BleedingTooth: Linux Bluetooth Zero-Click Remote Code Exe... by hansendc on Wednesday April 07, 2021 @02:37PM (#26729039)
> "the meltdown patch in the kernel thats disabled by default"

I'm not sure to what you are referring to here.

I was one of the people who worked on the Linux PTI implementation that mitigated Meltdown. My memory is not perfect, but I honestly don't know what you're referring to.

Re:BleedingTooth: Linux Bluetooth Zero-Click Remote Code Exe... by Snild on Wednesday April 07, 2021 @04:27PM (#26730746)
I'm guessing they're referring to Linus' ranting on Intel here: https://lore.kernel.org/lkml/CA+55aFwOkH8RH12Dzs=hT3e7eS3Ckz...

> The whole IBRS_ALL feature to me very clearly says "Intel is not serious about this, we'll have a ugly hack that will be so expensive that we don't want to enable it by default, because that would look bad in benchmarks".

Re:BleedingTooth: Linux Bluetooth Zero-Click Remote Code Exe... by mhh__ on Wednesday April 07, 2021 @08:43PM (#26733658)
> benchmarks

Live by the SPEC, die by the SPEC