Live data from Hacker News

The mysterious case of the Linux Page Table Isolation patches

pythonsweetness.tumblr.com

21–30 of 264 posts

Re: The mysterious case of the Linux Page Table Isolation patches

#21
post #6
post #4

If true, this is pretty huge. As if the AWS "You blew through your budget" emails right around midnight of New Years were only an appetizer. Edit: AWS Spurious Budget Email Barrage: https://www.reddit.com/r/aws/comments/7ndvli/anybody_get_spu...

I missed what happened with AWS? Any details

I got an email that I was going to go over usage, and then another minutes later that I was over. Logged in, only had a lambda sitting doing nothing.

Re: The mysterious case of the Linux Page Table Isolation patches

#22

No ones hiding anything, this patchset was developed in the open for many many months. The hysteria and intrigue in this random tumblr blog is completely superfluous. It's a hardware bug anyway. Here is a good hint to when something is not being embargoed: there is a paper and a public demonstration.

It sounds like Intel, Google and Amazon are hiding something. Wouldn't want customers thinking that cloud computing is fundamentally insecure now would we?

Well Intel for one manufactures the insecure CPUs..

This will be merged for 4.16, when there is no 4.15 release yet. No idea what your cloud computing companies run but it's not 4.15-dirty, and backporting this monster is a great recipe for a nightly emergency when it goes OOPS.

edit: it isn't even merged yet.

Re: The mysterious case of the Linux Page Table Isolation patches

#23

No ones hiding anything, this patchset was developed in the open for many many months. The hysteria and intrigue in this random tumblr blog is completely superfluous. It's a hardware bug anyway. Here is a good hint to when something is not being embargoed: there is a paper and a public demonstration.

Where is the paper and public demonstration in this case?

Re: The mysterious case of the Linux Page Table Isolation patches

#25

No ones hiding anything, this patchset was developed in the open for many many months. The hysteria and intrigue in this random tumblr blog is completely superfluous. It's a hardware bug anyway. Here is a good hint to when something is not being embargoed: there is a paper and a public demonstration.

The patchset being developed in the open, and the rationale for the development being done in the way it is, are two very different things.

Re: The mysterious case of the Linux Page Table Isolation patches

#27
post #5

Shouldn't cloud-grade computers be immune to rowhammer (or at least rowhammer should be much less efficient) as they typically use ECC RAM. Switching ECC RAM in a way that also modifies checksum in a deterministic way is (was?) not practical?

Yes one would thin so. And the mitigation patches in Linux suggest a CPU bug that could be fixed in future CPUs, not just rowhammer like attacks that are related to memory. So still think the attack path may be different.

Re: The mysterious case of the Linux Page Table Isolation patches

#28

Earlier quoted context omitted.

It sounds like Intel, Google and Amazon are hiding something. Wouldn't want customers thinking that cloud computing is fundamentally insecure now would we?

Well Intel for one manufactures the insecure CPUs.. This will be merged for 4.16, when there is no 4.15 release yet. No idea what your cloud computing companies run but it's not 4.15-dirty, and backporting this monster is a great recipe for a nightly emergency when it goes OOPS. edit: it isn't even merged yet.

It is being backported to 4.14, and presumably earlier kernel too.

Re: The mysterious case of the Linux Page Table Isolation patches

#29

No ones hiding anything, this patchset was developed in the open for many many months. The hysteria and intrigue in this random tumblr blog is completely superfluous. It's a hardware bug anyway. Here is a good hint to when something is not being embargoed: there is a paper and a public demonstration.

It sounds like Intel, Google and Amazon are hiding something. Wouldn't want customers thinking that cloud computing is fundamentally insecure now would we?

jika anda adalah seorang pekerja atau mengerjakan sesuatu, sebelum anda mengatakan kata menyembunyikan itu berarti anda melebihi batas, sehebat apapun kita tapi belum tentu mampu melewati kesadaran, belajarlah dari apa yang anda inginkan karena kata menyembunyikan mungkin tidak baik.

Re: The mysterious case of the Linux Page Table Isolation patches

#30
post #25

No ones hiding anything, this patchset was developed in the open for many many months. The hysteria and intrigue in this random tumblr blog is completely superfluous. It's a hardware bug anyway. Here is a good hint to when something is not being embargoed: there is a paper and a public demonstration.

The patchset being developed in the open, and the rationale for the development being done in the way it is, are two very different things.

But no one is hiding the bug this "fixes". If this bug + something else can be a hypervisor escape, well that's too bad for the AWS of this world, but I don't see how this patchset would leak the "something else" we don't know about?
Post reply on HN