Hacker News new | ask | show | jobs
by jbb67 2035 days ago
i hope this can be disabled because why would you ever run tasks you don't trust on your computer at all, let alone sharing a core
4 comments

Most people browsing the web are running untrusted (Javascript) code on their computers and devices. There have been plenty of browser-based, side-channel attack proofs of concepts written in Javascript, including a version of Rowhammer[1]

1. https://youtu.be/YniqBaSK-Eg

>why would you ever run tasks you don't trust on your computer at all

Sometimes you have to use proprietary software for work. Or maybe you just really want to play a game.

This refers to tasks that trust each other, not tasks that are trusted in general. For instance workloads on a shared server from 2 different users. It's for isolation for each other to mitigate side-channel attacks.
My understanding is that cloud providers will share the same machine among several different people, therefore allowing tasks that don't trust each other to run in their machines.