lkml.org 
[lkml]   [2018]   [Jan]   [8]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH 06/18] x86, barrier: stop speculation for failed access_ok
    On Sun, Jan 07, 2018 at 09:23:47PM -0500, David Miller wrote:
    > From: Thomas Gleixner <tglx@linutronix.de>
    > Date: Sun, 7 Jan 2018 21:56:39 +0100 (CET)
    >
    > > I surely agree, but we have gone the way of PTI without the ability of
    > > exempting individual processes exactly for one reason:
    > >
    > > Lack of time
    > >
    > > It can be done on top of the PTI implementation and it won't take ages.
    > >
    > > For spectre_v1/2 we face the same problem simply because we got informed so
    > > much ahead of time and we were all twiddling thumbs, enjoying our christmas
    > > vacation and having a good time.
    >
    > I just want to point out that this should be noted in history as a
    > case where all of this controlled disclosure stuff seems to have made
    > things worse rather than better.

    I will note that the "controlled disclosure" for this thing was a total
    and complete mess, and unlike any that I have ever seen in the past.
    The people involved in running it had no idea how to do it at all, and
    because of that, it failed miserably, despite being warned about it
    numerous times by numerous people.

    > Why is there so much haste and paranoia if supposedly some group of
    > people had all this extra time to think about and deal with this bug?

    Because that group was so small and isolated that they did not actually
    talk to anyone who could actually provide input to help deal with the
    bug.

    So we are stuck now with dealing with this "properly", which is fine,
    but please don't think that this is an excuse to blame "controlled
    disclosure". We know how to do that correctly, it did not happen in
    this case at all because of the people driving the problem refused to do
    it.

    > Think I'm nuts? Ok, then how did we fare any better by keeping this
    > junk under wraps for weeks if not months? (seriously, did responsible
    > people really know about this as far back as... June 2017?)

    Some "people" did, just not some "responsible people" :)

    Oh well, time for the kernel to fix hardware bugs again, that's what we
    are here for, you would think we would be used to it by now...

    greg k-h

    \
     
     \ /
      Last update: 2018-01-14 23:16    [W:3.841 / U:0.068 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site