[schoen]

> The dealbreaker problem remains a shared kernel attack surface between tenants.

Also, now, extremely subtle and hard-to-mitigate timing attacks between tenants.

[tptacek]

In fairness, that's an attack class that's very difficult to eradicate even with virtualization.