Subject: Re: working around that hyperthreading timing attack?
To: Hubert Feyrer <hubert@feyrer.de>
From: Daniel Carosone <dan@geek.com.au>
List: tech-security
Date: 05/25/2005 08:28:15
--i5ynXnOvlehzF3D3
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Tue, May 24, 2005 at 11:08:07PM +0200, Hubert Feyrer wrote:
>=20
> According to [1], ``FreeBSD, NetBSD and SCO have all issued workarounds=
=20
> for the flaw.'' (where "the flaw" is the timing problems described the=20
> past few days.
>=20
> My question is, can someone remind me what code was affected for this,=20
> maybe an URL to a source-changes mail?

There are no code changes, the workaround is simply to disable HT in
the BIOS.  There may be some code changes later, if it's determined
that they can feasibly provide any benefit - it's not entirely clear
that they can.

--
Dan.
--i5ynXnOvlehzF3D3
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (NetBSD)

iD8DBQFCk6p/EAVxvV4N66cRAqBSAJ9u2Zejc9StcHMokl3weAuJi9QQlgCgiTNT
NdXrSUj4VVqcmNQnz+qvlUM=
=Ueep
-----END PGP SIGNATURE-----

--i5ynXnOvlehzF3D3--