News for hackers. Stuff that matters.
Re:Branch Privilege Injection: Exploiting branch predictor r... by tsukikage on Wednesday May 14, 2025 @05:28AM (#43982574)
It's not a "just" if the fix cripples performance; it's a tradeoff. It is forced to hurt everything everywhere because the processor alone has no mechanism to determine when the mitigation is actually required and when it is not. It is 2025 and security is part of our world; we need to bake it right into how we think about processor/software interaction instead of attempting to bolt it on after the fact. We learned that lesson for internet facing software decades ago. It's about time we learned it here as well.
Re:Branch Privilege Injection: Exploiting branch predictor r... by tankenmate on Wednesday May 14, 2025 @07:30AM (#43983209)
Is the juice worth the squeeze? Not everything needs Orange Book (DoD 5200.28-STD) Class B1 systems.