OpenBSD chief de Raadt says no easy fix for new Intel CPU bug
Is the solution to this and previous side channel bugs to simply not run untrusted and trusted code on the same machine?Basically a revert to the security model of Windows XP. We should assume access to execute any code means the same security level as having physical access to a machine (I.e. full machine ownership)?