Untitled attachment

Notices where this attachment appears

1. ⚪ the lynne creacher (lynnesbian@fedi.lynnesbian.space)'s status on Wednesday, 15-May-2019 21:36:44 JST ⚪ the lynne creacher

   a new intel-specific CPU vulnerability has been discovered: https://www.cyberus-technology.de/posts/2019-05-14-zombieload.html

   quick facts:
   - can be used to leak data between processes, hyperthreads, SGX enclaves, etc
   - effects core and xeon CPUs
   - CPUs with meltdown mitigations are less effected, but still vulnerable
   - this is a hardware issue - OS independent
   - can be mitigated by disabling hyperthreading
   - proof of concept - one thread is able to access URLs typed into firefox (a different thread)