News for hackers. Stuff that matters.
Re:Google researchers discover 'Reptar', a new CPU vulnerabi... by quietpain on Tuesday November 14, 2023 @03:29PM (#38269260)

    ...our validation pipeline produced an interesting assertion...
What is a validation pipeline?
Re:Google researchers discover 'Reptar', a new CPU vulnerabi... by ForkMeOnTinder on Tuesday November 14, 2023 @03:37PM (#38269379)
It's described one paragraph earlier.

> I’ve written previously about a processor validation technique called Oracle Serialization that we’ve been using. The idea is to generate two forms of the same randomly generated program and verify their final state is identical.

Re:Google researchers discover 'Reptar', a new CPU vulnerabi... by 1f60c on Tuesday November 14, 2023 @03:52PM (#38269576)
Sounds like the real story should be that Google solved the halting problem. :-P
Re:Google researchers discover 'Reptar', a new CPU vulnerabi... by kadoban on Tuesday November 14, 2023 @04:06PM (#38269763)
You're free to solve the halting problem for restricted sets of programs, that doesn't break any rules of the universe.

They also could be just discarding any where it runs for longer than X time, or a bunch of other possibilities.

Re:Google researchers discover 'Reptar', a new CPU vulnerabi... by tgv on Wednesday November 15, 2023 @10:00AM (#38277295)
They might be generating programs that they know will halt. Like: applications with finite loops and such. There are not enough details.
Re:Google researchers discover 'Reptar', a new CPU vulnerabi... by tonfa on Tuesday November 14, 2023 @03:37PM (#38269376)
The blog has a link to https://lock.cmpxchg8b.com/zenbleed.html#discovery which presents the concept.
Re:Google researchers discover 'Reptar', a new CPU vulnerabi... by mgaunard on Tuesday November 14, 2023 @03:37PM (#38269367)
have you never heard of continuous integration?
Re:Google researchers discover 'Reptar', a new CPU vulnerabi... by boneitis on Tuesday November 14, 2023 @04:19PM (#38269949)
Rather, it looks to be:

https://en.wikipedia.org/wiki/Instruction_pipelining

From the Zenbleed link in sibling:

> I found this bug by fuzzing, big surprise [..] In fact, vendors fuzz their own products extensively - the industry term for it is Post-Silicon Validation.

That is, "a pipeline to validate the pipeline".