From owner-freebsd-security@freebsd.org Wed Mar 6 13:33:05 2019 Return-Path: Delivered-To: freebsd-security@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 356D615166D5 for ; Wed, 6 Mar 2019 13:33:05 +0000 (UTC) (envelope-from cy.schubert@cschubert.com) Received: from smtp-out-no.shaw.ca (smtp-out-no.shaw.ca [64.59.134.13]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "Client", Issuer "CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 2E6528DCA8; Wed, 6 Mar 2019 13:33:04 +0000 (UTC) (envelope-from cy.schubert@cschubert.com) Received: from spqr.komquats.com ([70.67.125.17]) by shaw.ca with ESMTPA id 1WfKh3kGthn9P1WfLhvkFv; Wed, 06 Mar 2019 06:32:59 -0700 X-Authority-Analysis: v=2.3 cv=NZuYKFL4 c=1 sm=1 tr=0 a=VFtTW3WuZNDh6VkGe7fA3g==:117 a=VFtTW3WuZNDh6VkGe7fA3g==:17 a=kj9zAlcOel0A:10 a=NTGMnVQrEZIA:10 a=6I5d2MoRAAAA:8 a=YxBL1-UpAAAA:8 a=W5wWH8oW--raX8Fxr0wA:9 a=CjuIK1q_8ugA:10 a=IjZwj45LgO3ly-622nXo:22 a=Ia-lj3WSrqcvXOmTRaiG:22 Received: from slippy.cwsent.com (slippy [10.1.1.91]) by spqr.komquats.com (Postfix) with ESMTPS id 1B5631D6; Wed, 6 Mar 2019 05:32:58 -0800 (PST) Received: from slippy.cwsent.com (localhost [127.0.0.1]) by slippy.cwsent.com (8.15.2/8.15.2) with ESMTP id x26DWvLw004295; Wed, 6 Mar 2019 05:32:57 -0800 (PST) (envelope-from Cy.Schubert@cschubert.com) Received: from slippy (cy@localhost) by slippy.cwsent.com (8.15.2/8.15.2/Submit) with ESMTP id x26DWu3f004292; Wed, 6 Mar 2019 05:32:56 -0800 (PST) (envelope-from Cy.Schubert@cschubert.com) Message-Id: <201903061332.x26DWu3f004292@slippy.cwsent.com> X-Authentication-Warning: slippy.cwsent.com: cy owned process doing -bs X-Mailer: exmh version 2.8.0 04/21/2012 with nmh-1.7.1 Reply-to: Cy Schubert From: Cy Schubert X-os: FreeBSD X-Sender: cy@cwsent.com X-URL: http://www.cschubert.com/ To: lev@FreeBSD.org cc: Shawn Webb , Cy Schubert , FreeBSD-security@freebsd.org Subject: Re: Spoiler Alert In-Reply-To: Message from Lev Serebryakov of "Wed, 06 Mar 2019 14:01:08 +0300." <2c3f9748-a17f-3778-9eaa-99087f33d0e3@FreeBSD.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Wed, 06 Mar 2019 05:32:56 -0800 X-CMAE-Envelope: MS4wfISDqySTFebDKeEGyHsB+tj6tlMdOcrSA1EIK03aE4gz6H7seLkVIHdQ5UaJv+eO+K5YxDfl3hUJzWLlUmwwZnUANVSpl0Ou1FV9PPw3/OMtwuZEgA5b +0iAycolTVHmL4s/nEMTm263qYIhQjR3jih00lxiCrt9vmGjRDRJDJIRDW0rPAP49UpBP9hU7DjrUUxfSQfLwZVmTUSV5+dQtVAcFkC8yOBFiAuCtkAjAcs+ m9X0V12S1NPdI30+OylmgQ== X-Rspamd-Queue-Id: 2E6528DCA8 X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [-4.91 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; RCVD_COUNT_FIVE(0.00)[5]; RECEIVED_SPAMHAUS_PBL(0.00)[17.125.67.70.zen.spamhaus.org : 127.0.0.11]; RCPT_COUNT_THREE(0.00)[4]; TO_DN_SOME(0.00)[]; MV_CASE(0.50)[]; FROM_HAS_DN(0.00)[]; MIME_GOOD(-0.10)[text/plain]; HAS_XAW(0.00)[]; HAS_REPLYTO(0.00)[Cy.Schubert@cschubert.com]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; REPLYTO_EQ_FROM(0.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; MX_GOOD(-0.01)[cached: spqr.komquats.com]; NEURAL_HAM_SHORT(-0.98)[-0.983,0]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_SPF_NA(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:6327, ipnet:64.59.128.0/20, country:CA]; RCVD_TLS_LAST(0.00)[]; IP_SCORE(-2.21)[ip: (-6.10), ipnet: 64.59.128.0/20(-2.76), asn: 6327(-2.12), country: CA(-0.09)]; RCVD_IN_DNSWL_LOW(-0.10)[13.134.59.64.list.dnswl.org : 127.0.5.1] X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Mar 2019 13:33:05 -0000 In message <2c3f9748-a17f-3778-9eaa-99087f33d0e3@FreeBSD.org>, Lev Serebryakov writes: > On 05.03.2019 22:55, Shawn Webb wrote: > > >> This came over my phone's news feed. Another example that Colin Perciv= > al was right when he wrote his paper on exploiting cache for fun and prof= > it many years ago. > >=20 > > Weird machines are weird. > Not-weird machines are dead-slow :-( Picking a random email in this thread to reply. The problem is that there are so many of these Spectre class of exploits that we collectively roll our eyes. Yet another one is not news any more. -- Cheers, Cy Schubert FreeBSD UNIX: Web: http://www.FreeBSD.org The need of the many outweighs the greed of the few.