Re: Defeating HyperThreading attacks

tomstdenis@gmail.com wrote:
> The problem is it's not really possible to tell the attacker program
> from another normal process. The solution to this problem has always
> been better user security. Don't have users on your www boxes.

This isn't an option for everybody. Companies which sell "shared
webhosting" services generally have problems if they refuse to allow
their customers to have access to the servers. :-)

Many companies refuse to allow shell access, of course, but with most web
hosts offering CGI privileges, that makes little difference.

> Tom

BTW, do you have any plans for defending against this in libtomcrypt?

Colin Percival
Received on Thu Sep 29 21:39:17 2005