News for hackers. Stuff that matters.
Re:Downfall Attacks by snvzz on Tuesday August 08, 2023 @10:13PM (#37057968)
>This isn’t true - note how similar vulnerabilities have occurred on ARM, POWER, etc.

I understand you're trying to argue against my main point, which is:

>ISA complexity breeds microarchitecture bugs.

And definitely stands.

From there I have no idea how you derived that bugs are impossible under a simple ISA, which is implied in your statement.

As an added note: ARM in particular isn't simple. It's simpler than x86, but that's a low bar to meet.

>even if you weren’t wrong, it would be off-topic

We will have to agree to disagree on this.

Re:Downfall Attacks by CanaryLayout on Tuesday August 08, 2023 @10:25PM (#37058033)
On a certain level this is like arguing that you will never see this problem in an Arduino.

I mean, sure. On many levels and planes you are correct, but not where any of the intersections matter.

Re:Downfall Attacks by snvzz on Tuesday August 08, 2023 @10:29PM (#37058057)
If it's not clear enough, I am not talking whatever Arduino strawman you came up with.

I am talking about RISC architectures such as RISC-V (which I mentioned by name), the sort that can scale all the way up to supercomputers and down to microcontrollers.

There is no justification for putting up with x86's complexity. This complexity has negative consequences such as vastly increased likeliness of micro-architectural bugs.

It is utter madness for many of its current popular uses, such as in servers handling personal data.

Re:Downfall Attacks by acdha on Wednesday August 09, 2023 @11:21AM (#37064072)
I see you’re basically trying to “No True Scotsman” a definition where anything which isn’t RISC-V is too complicated. That’s a shame as the time you’re spending on counterproductive RISC-V advocacy could have been spent learning about this class of attack and how it has nothing to do with the ISA.

When a CPU implements speculative execution, this class of attack becomes a concern. If it doesn’t, it’ll be too slow for most applications. Fortunately, the people who are - unlike you - actually helping RISC-V are working on efficient countermeasures:

https://arxiv.org/abs/2206.04507