From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.linutronix.de (146.0.238.70:993) by crypto-ml.lab.linutronix.de with IMAP4-SSL for ; 05 Mar 2019 17:10:58 -0000 Received: from mx1.redhat.com ([209.132.183.28]) by Galois.linutronix.de with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA256:256) (Exim 4.80) (envelope-from ) id 1h1Dai-0003RL-Gz for speck@linutronix.de; Tue, 05 Mar 2019 18:10:57 +0100 Received: from smtp.corp.redhat.com (int-mx05.intmail.prod.int.phx2.redhat.com [10.5.11.15]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.redhat.com (Postfix) with ESMTPS id AB7D330832CF for ; Tue, 5 Mar 2019 17:10:48 +0000 (UTC) Received: from tonnant.bos.jonmasters.org (ovpn-124-214.rdu2.redhat.com [10.10.124.214]) by smtp.corp.redhat.com (Postfix) with ESMTPS id EE3AA5D782 for ; Tue, 5 Mar 2019 17:10:47 +0000 (UTC) References: From: Jon Masters Message-ID: Date: Tue, 5 Mar 2019 12:10:45 -0500 MIME-Version: 1.0 In-Reply-To: Subject: [MODERATED] Encrypted Message Content-Type: multipart/mixed; boundary="DJiHJFLpN32QBKKwyByJPCmw2lDww3od1"; protected-headers="v1" To: speck@linutronix.de List-ID: This is an OpenPGP/MIME encrypted message (RFC 4880 and 3156) --DJiHJFLpN32QBKKwyByJPCmw2lDww3od1 Content-Type: text/rfc822-headers; protected-headers="v1" Content-Disposition: inline From: Jon Masters To: speck for Linus Torvalds Subject: NOT PUBLIC - Re: Starting to go public? --DJiHJFLpN32QBKKwyByJPCmw2lDww3od1 Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 3/5/19 11:43 AM, speck for Linus Torvalds wrote: > Looks like the papers are starting to leak: >=20 > https://arxiv.org/pdf/1903.00446.pdf >=20 > yes, yes, a lot of the attack seems to be about rowhammer, but the > "spolier" part looks like MDS. It's not but it is close to finding PSF behavior. The thing they found is described separately in one of the original Intel store patent. So we are at risk but should not panic. I've spoken with several researchers sitting on MDS papers and confirmed that they are NOT concerned at this stage. Of course everyone is carefully watching and that's why we need to have contingency. People will start looking in this area (I know of three teams doing so) now. Jon. --=20 Computer Architect | Sent with my Fedora powered laptop --DJiHJFLpN32QBKKwyByJPCmw2lDww3od1--