florian is a user on bsd.network. You can follow them or interact with them if you have an account anywhere in the fediverse.
If you don't, you can sign up here.
"Our TLBleed exploit successfully leaks a 256-bit EdDSA key from libgcrypt (used in e.g. GPG) with a
98% success rate after just a single observation of signing operation on a co-resident hyperthread and just 17 seconds of analysis time."
https://www.blackhat.com/us-18/briefings.html#tlbleed-when-protecting-your-cpu-caches-is-not-enough
@florian
https://www.mail-archive.com/source-changes@openbsd.org/msg99141.html
``
Since many modern
machines no longer provide the ability to disable Hyper-threading in
the BIOS setup, provide a way to disable the use of additional
processor threads in our scheduler. And since we suspect there are
serious risks, we disable them by default
``
Ok.
good thing you hate pgp @phessler