TLBleed -YAICSF

[Arwen]

YAICSF = Yet Another Intel CPU Security Flaw

This ones for Intel CPU's Translation Look-aside Buffer, part of a CPUs memory management. It also only applies to Hyper-Threading, and disabling HT mitigates this 100%. There are some software mitigations that don't require disabling HT. But, they are not perfect, so we can say the Cloud is full of holes! :)

No one seems to know if this will apply to other vendors, like AMD, IBM or Oracle.

I wish a vendor would come out with a super secure CPU, even if it was not the fastest. Especially with out the builtin back doors called management processors.

 

[gpsguy]

Yeah, it was mentioned on /. today. We'll have to wait until August to read the research paper.

 

[rvassar]

No one seems to know if this will apply to other vendors, like AMD, IBM or Oracle.

Is Oracle even still in the game? I was under the impression the Austin T team is gone, and Fujitsu was doing most of the USIV stuff.