<div dir="ltr">We all login to the CFarm system using ssh keys.<div>IF you use agent forwarding AND a key trusted elsewhere, you could be a target of ssh-agent hijacking.</div><div><br></div><div>-Paul</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Sat, Jan 6, 2018 at 2:30 AM, Stas Boukarev via cfarm-users <span dir="ltr"><<a href="mailto:cfarm-users@lists.tetaneutral.net" target="_blank">cfarm-users@lists.tetaneutral.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Do people really process sensitive data on the compiler farm?<div><div class="h5"><br><br><div class="gmail_quote"><div dir="ltr">On Sat, Jan 6, 2018 at 5:21 AM Jeffrey Walton via cfarm-users <<a href="mailto:cfarm-users@lists.tetaneutral.net" target="_blank">cfarm-users@lists.<wbr>tetaneutral.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi Everyone,<br>
<br>
It looks like PoCs are starting to be released for the CPU bugs. Or<br>
there's a PoC in the wild for ARM processors. The farm may want to<br>
accelerate deployment of the fixes if it has not done so.<br>
<br>
Early reports:<br>
* <a href="https://amp.reddit.com/r/sysadmin/comments/7nl8r0/intel_bug_incoming/" rel="noreferrer" target="_blank">https://amp.reddit.com/r/<wbr>sysadmin/comments/7nl8r0/<wbr>intel_bug_incoming/</a><br>
* <a href="https://www.theregister.co.uk/2018/01/02/intel_cpu_design_flaw/" rel="noreferrer" target="_blank">https://www.theregister.co.uk/<wbr>2018/01/02/intel_cpu_design_<wbr>flaw/</a><br>
<br>
Latest news:<br>
* <a href="https://www.theverge.com/2018/1/4/16848976/how-to-protect-windows-pc-meltdown-security-flaw" rel="noreferrer" target="_blank">https://www.theverge.com/2018/<wbr>1/4/16848976/how-to-protect-<wbr>windows-pc-meltdown-security-<wbr>flaw</a><br>
<br>
Jeff<br>
______________________________<wbr>_________________<br>
cfarm-users mailing list<br>
<a href="mailto:cfarm-users@lists.tetaneutral.net" target="_blank">cfarm-users@lists.tetaneutral.<wbr>net</a><br>
<a href="https://lists.tetaneutral.net/listinfo/cfarm-users" rel="noreferrer" target="_blank">https://lists.tetaneutral.net/<wbr>listinfo/cfarm-users</a><br>
</blockquote></div></div></div></div>
<br>______________________________<wbr>_________________<br>
cfarm-users mailing list<br>
<a href="mailto:cfarm-users@lists.tetaneutral.net">cfarm-users@lists.tetaneutral.<wbr>net</a><br>
<a href="https://lists.tetaneutral.net/listinfo/cfarm-users" rel="noreferrer" target="_blank">https://lists.tetaneutral.net/<wbr>listinfo/cfarm-users</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><font face="courier new, monospace"><div>Paul H. Hargrove <<a href="mailto:PHHargrove@lbl.gov" target="_blank">PHHargrove@lbl.gov</a>></div><div>Computer Languages & Systems Software (CLaSS) Group</div><div>Computer Science Department</div><div>Lawrence Berkeley National Laboratory</div></font></div></div></div></div></div>
</div>