Keynote: MDS, Fallout, Zombieland & Linux
summary
MDS and related microarchitectural exploits hit Intel CPUs and leak cross-process, cross-VM and enclave data; fixes require flushing CPU buffers on every context switch and coordinated BIOS updates, or disable hyper-threading to remove almost all risk. Measured slowdowns vary by workload from ~1–5% generally to ~15–20% for kernel builds, and kernel teams push weekly stable fixes so update BIOS and kernel. CVEs for kernel fixes are unreliable; Google finds ~92/201 reported issues already fixed.
AI-written summary · about
chapters (23)
- 0:00Introduction
- 0:20Disclaimer
- 0:45MDS
- 2:37MDS Security
- 3:46OpenBSD
- 5:20Secure Enclave
- 5:39Fallout
- 5:49Meltdown
- 6:20Zombieland
- 6:43Storage Leak Meltdown
- 7:03Swap to Yes
- 7:20Intel Patents
- 7:51flushing buffers
- 8:40how slow is this
- 9:54performance vs security
- 11:09Linux Meltdown
- 12:54Security fixes
- 13:45Kernel fixes
- 14:30Seebees
- 14:58Seebees Abuse
- 16:00Google Documentation
- 17:31LTS
- 17:54We Feel Bad
