Delete comment from: Project Zero
Chris said...
Never mind the future goodwill and trust impact on this one.
The Pentium calculus bug was pretty bad for them, but this makes everything else pale in comparison, and if the performance losses are as big as an average of 20%, then someone will demand quite some comp for that.
The spectre vulnerability seems to be more of a generic one, while bad, not as easy to actually do on a generic system where you don't know the current setup.
As for mitigating that one, it looks like you may have to make cache lines private to the process, rather than a shared general global space.
Jan 4, 2018, 1:51:23 PM