Greg Kroah-Hartman, the stable Linux kernel maintainer, could have prefaced his Open Source Summit Europe keynote speech, MDS, Fallout, Zombieland, and Linux, by paraphrasing Winston Churchill: I have nothing to offer but blood sweat and tears for dealing with Intel CPU's security problems.
Or as a Chinese developer told him recently about these problems: "This is a sad talk." The sadness is that the same Intel CPU speculative execution problems, which led to Meltdown and Spectre security issues, are alive and well and causing more trouble.
The problem with how Intel designed speculative execution is that, while anticipating the next action for the CPU to take does indeed speed things up, it also exposes data along the way. That's bad enough on your own server, but when it breaks down the barriers between virtual machines (VM)s in cloud computing environments, it's a security nightmare.
(Score: 1, Interesting) by Anonymous Coward on Wednesday October 30 2019, @07:38PM (1 child)
Virtual Machines didn't sell enough CPUs. Now everyone will need actual machines each with their own CPU!
(Score: 0) by Anonymous Coward on Wednesday October 30 2019, @08:15PM
Rumor has it that a lot of companies are pissed off at Intel, expect more problems, and no gesture is going to prevent them from switching to AMD. Companies that were thinking about switching to AMD in the future accelerated their plans by years.