151–159 of 159 posts
Earlier quoted context omitted.
AWS is able to get custom Intel Processors due to their size (c5 instances have a custom Intel processor).
Makes sense. I sure would like some custom processors. :-)
Technically.
(I want to...)
Earlier quoted context omitted.
Indeed, the idea of "Security" is not negotiable when marketing. Imagine buying a car that says, "Save $5000 for a less safe version without airbags." Yes, I know Airbags are DOT requirement, just trying to make a point. Edit: I think people are missing my point. I am not saying they don't sell cheaper models that are less safe. My point is that they don't ACTIVELY market them as such. Point me to an advertisement th…
...and people still buy motorcycles (which are significantly cheaper), proving that "security" or "safety" is not an absolute, nor a must-have.
I would love to but how in the world do I do this when I'm using Windows and Lenovo doesn't give me an option in the BIOS?
One way to achieve something similar would be via a software tool which would set the process affinity to only run on real cores. Or you could only run Chrome (untrusted JavaScript) on core 2 and 3, and run the app that has your secrets on core 0 and 1. (It is my understanding that 2k cores are real, and 2k+1 is their matching, "virtual" core) This way you get both hyperthreading and security. I'm not a security expe…
I'm not sure that's true. For example, on a i7-4770 I get:
$ cat /sys/devices/system/cpu/cpu[0-3]/topology/thread_siblings_list
0,4
1,5
2,6
3,7
In the end, the conclusion is: "Long story short, Hyper Threading is still very much relevant in 2018 with current-generation Intel CPUs. In the threaded workloads that could scale past a few threads, HT/SMT on this Core i7 8700K processor yielded about a 30% performance improvement in many of these real-world test cases."
Scary looking headline on a discussion forum with instructions to perform a task that the average user would not really understand, with no explanation of attack vector or even consequences for any user who doesn't want to take the time (and energy, frankly at this point) to follow security news. I'm pretty close to not caring anymore. I hope somebody figures out how to at least fix the security news infrastructure,…
This is not security news at all. This is Theo de Raadt's personal E-mail sent to the OpenBSD development mailing list for system developers. It is never intended for the consumption by the general public.
Thanks!
Will be interesting to see what Apple does about this in their next software update. I can’t imagine many people will be happy if the next software update forcibly disables hyper threading. (For those who aren’t familiar with Apple devices, Apple don’t expose settings like this to a user, which are usually available in the BIOS on a PC)
Will the loss of HT have apparent consequences on most Intel-based Apple hardware? Very few of them are servers under constant multithreaded load, throughput-oriented. I suppose almost all Macbooks and most Mac Pros will not visibly slow down.
Earlier quoted context omitted.
i'm pretty sure this is not true: The most recent example i remember is: https://lobste.rs/s/dwzplh/krack_attacks_breaking_wpa2#c_pbh...
This is common misinformation. Even in this case, OpenBSD did not break the embargo. After protesting, they received the permission of the researcher to publish: Note that I wrote and included a suggested diff for OpenBSD already, and that at the time the tentative disclosure deadline was around the end of August. As a compromise, I allowed them to silently patch the vulnerability. ( https://www.krackattacks.com/#ope…
Earlier quoted context omitted.
For hypervisors it's automatic. For operating systems, there's no performance penalty. Browsers need not do anything.
Unless the browser is using hypervisor https://arstechnica.com/information-technology/2016/09/windo...