"CrossTalk" / SRBDS Is The Newest Side-Channel Vulnerability

[phoronix]

Phoronix: "CrossTalk" / SRBDS Is The Newest Side-Channel Vulnerability

Details are still coming in but INTEL-SA-00320, a.k.a. "CrossTalk", is the newest Intel side-channel CPU vulnerability...

http://www.phoronix.com/scan.php?page=news_item&px=CrossTalk-Buffer-Data-Sampling

[CochainComplex]

here we go again... this means a benchmark marathon to assess the performance impact. It is already difficult to distinguish all mitigations.

[Spooktra]

Makes me wonder if someone is hell bent on tanking Intel's stock so they can buy it up cheaply and make some dough when it inevitably goes up.

[birdie]

Looks like all the pages pertaining to this vulnerability have been pulled. Let's wait for more info as I don't see this vulnerability even in the news.

It's usually The Register which breaks cover with such stories and they have absolutely nothing.

[muncrief]

Good lord, does it ever stop? I mean seriously, how many mitigations are there for Intel now? And I know AMD has less but it also has a significant number of them.

And when on Earth are we going to get processors that don't have to be crippled to be secure?

[halo9en]

Michael the link ("today's report") points to a 404

[numacross]

And when on Earth are we going to get processors that don't have to be crippled to be secure?

While having the same level of performance? Probably never?

[NotMine999]

I wonder when Intel will realize that they simply ought to go back to the drawing board with a BLANK piece of paper ... what AMD did with Zen.

In other words, Intel ought to re-imagine the internals of processors rather than constantly putting lipstick on what is turning out to be a very ugly pig.

[Almindor]

I think Intel should be legally obligated to put a "performance might be impacted by vulnerability mitigations up to 90% from advertised values" on all their CPUs.

[Michael]

Michael the link ("today's report") points to a 404

Intel took down the blog post after I posted the article... Presumably they accidentally posted it early. I assume at the top of the hour or so it will go live again.....

One of the CrossTalk researchers has also now reached out to Phoronix more details soon.

Also have benchmarks going.