Wasn’t it that those bugs were public knowledge by the time M1 was starting to sell? I guess recalls or delays to revenue are not acceptable.
Trophy for Apple being the first one to bring these speculative execution side channel attacks to Arm, because I’ve never heard of other cases. Ifi missed that please share enough details that I can find a white paper about it, because I don’t read those kind of news from media.
Side channel attacks are as old as computing, and the specific CPU variants exploiting speculative execution have not simply occurred on 2018 hardware and stopped since; pretty much all CPU architecture is susceptible to some form of speculative execution exploit, Apple simply is not an exception to the rule, and I think it’s unfair to call them out as somehow incompetent for making the same mistake as literally everyone
Yep sure that’s the definition of a 0 day vulnerability, it was always there and suddenly someone found out.
What I’m saying is that I have a special interest in this topic and never heard of this problem for Arm before, and if some has more awareness than me I’d like to hear more from trusted sources.
Then you probably don’t know about Spectre and Meltdown from a few years ago. Same family of problem on x86-64 (so Intel and AMD chips).
Wasn’t it that those bugs were public knowledge by the time M1 was starting to sell? I guess recalls or delays to revenue are not acceptable.
Trophy for Apple being the first one to bring these speculative execution side channel attacks to Arm, because I’ve never heard of other cases. Ifi missed that please share enough details that I can find a white paper about it, because I don’t read those kind of news from media.
Side channel attacks are as old as computing, and the specific CPU variants exploiting speculative execution have not simply occurred on 2018 hardware and stopped since; pretty much all CPU architecture is susceptible to some form of speculative execution exploit, Apple simply is not an exception to the rule, and I think it’s unfair to call them out as somehow incompetent for making the same mistake as literally everyone
https://www.vusec.net/projects/ghostrace/
That you’ve never heard of it does not mean it doesn’t exist. You - or anyone else - just never heard of it.
Yep sure that’s the definition of a 0 day vulnerability, it was always there and suddenly someone found out.
What I’m saying is that I have a special interest in this topic and never heard of this problem for Arm before, and if some has more awareness than me I’d like to hear more from trusted sources.