this post was submitted on 28 Jan 2025
290 points (97.4% liked)
Technology
61237 readers
6305 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Side channel attacks are as old as computing, and the specific CPU variants exploiting speculative execution have not simply occurred on 2018 hardware and stopped since; pretty much all CPU architecture is susceptible to some form of speculative execution exploit, Apple simply is not an exception to the rule, and I think it's unfair to call them out as somehow incompetent for making the same mistake as literally everyone
https://www.vusec.net/projects/ghostrace/
That's a cool article, I had a quick read and will go back to it later.
Inter-Process Interrupt seems to be very cool, but the fact you have to start it exactly when a pointer in the kernel is created makes it a big hit and miss, and the fact one cpu is frozen during the process may make it easy to detect she counter.
I can and will call Apple many things such as unusually greedy, the new Microsoft that got big decade ago and have to buy companies to have new successful products, marketing brainwashing, cult and more. But not incompetent when it comes to M1.
M1 laptops performance is not due to what most people believe, and all the side channel attacks unique to it I've heard from, come from speculative memory address loads. It's pushing speculation in directions neither Intel nor AMD or Arm chips did before, and they're released in a time where side channel attacks are starting to be very l well understood.
I'm sure there was an engineer saying this was a bad idea, over ruled by a manager under the pressure of CFO to make it happen. So I blame this on greed.