BranchScope: A New Side-Channel Attack on Directional Branch Predictor
It's been said multiple times and often dismissed, but it's becoming more evident that sharing the same hardware with untrusted code is not a good idea at all. Once again the biggest effect is on shared hosting/cloud services, while users of single-user personal computers and self-hosted services are quite immune by default... IMHO giving people more reasons not to run their code on and trust some server located remotely is a good thing.<p><i>The researchers looked only at Intel processors, using the attacks to leak information protected using Intel's SGX (Software Guard Extensions), a feature found on certain chips to carve out small sections of encrypted code and data such that even the operating system (or virtualization software) cannot access it.</i><p>Perhaps the other good thing to come of this. Fuck that DRM shit.