From mboxrd@z Thu Jan 1 00:00:00 1970 From: hpa@zytor.com (H. Peter Anvin) Date: Tue, 30 Jul 2013 17:01:37 -0700 Subject: [Ksummit-2013-discuss] [ARM ATTEND] catching up on exploit mitigations In-Reply-To: References: <20130730221435.GA22240@redhat.com> <20130730231120.GC30725@blackmetal.musicnaut.iki.fi> <20130730231533.GA26824@redhat.com> Message-ID: <51F853E1.2080808@zytor.com> To: linux-arm-kernel@lists.infradead.org List-Id: linux-arm-kernel.lists.infradead.org On 07/30/2013 04:33 PM, Kees Cook wrote: >> >> If you're running it as a regular user and you can brick the board, >> you might have bigger problems. > > Exactly, and finding those problems tends to be worth the hardware hassle. :) > Even as root the number of things allowed to brick the hardware is quite small. Call it destructive testing. -hpa From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1758507Ab3GaAC1 (ORCPT ); Tue, 30 Jul 2013 20:02:27 -0400 Received: from terminus.zytor.com ([198.137.202.10]:38204 "EHLO mail.zytor.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1756649Ab3GaAC0 (ORCPT ); Tue, 30 Jul 2013 20:02:26 -0400 Message-ID: <51F853E1.2080808@zytor.com> Date: Tue, 30 Jul 2013 17:01:37 -0700 From: "H. Peter Anvin" User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130625 Thunderbird/17.0.7 MIME-Version: 1.0 To: Kees Cook CC: Dave Jones , Aaro Koskinen , "linux-arm-kernel@lists.infradead.org" , ksummit-2013-discuss@lists.linuxfoundation.org, LKML Subject: Re: [Ksummit-2013-discuss] [ARM ATTEND] catching up on exploit mitigations References: <20130730221435.GA22240@redhat.com> <20130730231120.GC30725@blackmetal.musicnaut.iki.fi> <20130730231533.GA26824@redhat.com> In-Reply-To: X-Enigmail-Version: 1.5.2 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 07/30/2013 04:33 PM, Kees Cook wrote: >> >> If you're running it as a regular user and you can brick the board, >> you might have bigger problems. > > Exactly, and finding those problems tends to be worth the hardware hassle. :) > Even as root the number of things allowed to brick the hardware is quite small. Call it destructive testing. -hpa