{"id":179557,"date":"2018-01-03T20:58:00","date_gmt":"2018-01-04T01:58:00","guid":{"rendered":"https:\/\/www.panix.com\/~msaroff\/40years\/2018\/01\/03\/forcefully-unmap-complete-kernel-with-interrupt-trampolines\/"},"modified":"2018-01-03T20:58:00","modified_gmt":"2018-01-04T01:58:00","slug":"forcefully-unmap-complete-kernel-with-interrupt-trampolines","status":"publish","type":"post","link":"https:\/\/www.panix.com\/~msaroff\/40years\/2018\/01\/03\/forcefully-unmap-complete-kernel-with-interrupt-trampolines\/","title":{"rendered":"Forcefully Unmap Complete Kernel With Interrupt Trampolines"},"content":{"rendered":"

Yes, Apple crippled older phones, and Intel said, “Here, hold my beer<\/a>.”<\/p>\n

Basically the error can allow low level programs to take over the kernel, with a result kind of like that scene in Raiders of the Lost Ark<\/i> when they open up the ark.<\/p>\n

There is a fix, but it involves changes to the operating system that causes a significant performance hit, and Linux developers were unamused<\/a>:<\/p>\n

2) Namespace<\/span>

<\/span>   Several people including Linus requested to change the KAISER name.<\/span>

<\/span>   We came up with a list of technically correct acronyms:<\/span>

<\/span>     User Address Space Separation, prefix uass_<\/span>

<\/span>     Forcefully Unmap Complete Kernel With Interrupt Trampolines, prefix f%$#wit_<\/span>

<\/span>   but we are politically correct people so we settled for<\/span>

<\/span>    Kernel Page Table Isolation, prefix kpti_<\/span>

<\/span>   Linus, your call :))<\/span><\/p><\/blockquote>\n

As near as I can figure out, Intel’s claim that this is, “Not a bug,” and this appears to be true.<\/p>\n

This appears to be a direct consequence of their attempt to boost processor performance<\/a> in their competition with AMD, which appears not to be vulnerable to the “KPTI” bug, also called “Meldtown”.<\/p>\n

However, it does appear that speculative execution in general creates a whole host of potential (though thankfully more difficult) exploits across a much wider range of processors<\/a>. (This one is called Spectre).<\/p>\n

I’m beginning to think that it is time for a major change in CPU architectures.<\/p>\n","protected":false},"excerpt":{"rendered":"

Yes, Apple crippled older phones, and Intel said, “Here, hold my beer.” Basically the error can allow low level programs to take over the kernel, with a result kind of like that scene in Raiders of the Lost Ark when they open up the ark. There is a fix, but it involves changes to the …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[395,588,541,533,382],"class_list":["post-179557","post","type-post","status-publish","format-standard","hentry","tag-computer","tag-fail","tag-security","tag-software","tag-technology"],"_links":{"self":[{"href":"https:\/\/www.panix.com\/~msaroff\/40years\/wp-json\/wp\/v2\/posts\/179557"}],"collection":[{"href":"https:\/\/www.panix.com\/~msaroff\/40years\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.panix.com\/~msaroff\/40years\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.panix.com\/~msaroff\/40years\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.panix.com\/~msaroff\/40years\/wp-json\/wp\/v2\/comments?post=179557"}],"version-history":[{"count":0,"href":"https:\/\/www.panix.com\/~msaroff\/40years\/wp-json\/wp\/v2\/posts\/179557\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.panix.com\/~msaroff\/40years\/wp-json\/wp\/v2\/media?parent=179557"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.panix.com\/~msaroff\/40years\/wp-json\/wp\/v2\/categories?post=179557"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.panix.com\/~msaroff\/40years\/wp-json\/wp\/v2\/tags?post=179557"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}