Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S262385AbVEMOdG (ORCPT ); Fri, 13 May 2005 10:33:06 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S262388AbVEMOdF (ORCPT ); Fri, 13 May 2005 10:33:05 -0400 Received: from mail.dvmed.net ([216.237.124.58]:52180 "EHLO mail.dvmed.net") by vger.kernel.org with ESMTP id S262385AbVEMOc5 (ORCPT ); Fri, 13 May 2005 10:32:57 -0400 Message-ID: <4284BA90.5080508@pobox.com> Date: Fri, 13 May 2005 10:32:48 -0400 From: Jeff Garzik User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.6) Gecko/20050328 Fedora/1.7.6-1.2.5 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Daniel Jacobowitz CC: "Barry K. Nathan" , Gabor MICSKO , linux-kernel@vger.kernel.org Subject: Re: Hyper-Threading Vulnerability References: <1115963481.1723.3.camel@alderaan.trey.hu> <20050513124735.GA7436@ip68-225-251-162.oc.oc.cox.net> <4284B55C.7010202@pobox.com> <20050513142336.GA6174@nevyn.them.org> In-Reply-To: <20050513142336.GA6174@nevyn.them.org> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Score: 0.0 (/) Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1467 Lines: 50 Daniel Jacobowitz wrote: > On Fri, May 13, 2005 at 10:10:36AM -0400, Jeff Garzik wrote: > >>Barry K. Nathan wrote: >> >>>On Fri, May 13, 2005 at 07:51:20AM +0200, Gabor MICSKO wrote: >>> >>> >>>>Is this flaw affects the current stable Linux kernels? Workaround? >>>>Patch? >> >>Simple. Just boot a uniprocessor kernel, and/or disable HT in BIOS. >> >> >> >>>Some pages with relevant information: >>>http://www.ussg.iu.edu/hypermail/linux/kernel/0403.2/0920.html >>>http://bugzilla.kernel.org/show_bug.cgi?id=2317 >> >>These pages have zero information on the "flaw." In fact, I can see no >>information at all proving that there is even a problem here. >> >>Classic "I found a problem, but I'm keeping the info a secret" security >>crapola. > > > FYI: > http://www.daemonology.net/hyperthreading-considered-harmful/ Already read it. This link provides no more information than either of the above links provide. > I don't much agree with Colin about the severity of the problem, but > I've read his paper, which should be generally available later today. > It's definitely a legitimate issue. We'll see... As of this moment, there continues to be _zero_ information proving that a problem exists. Jeff - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/