[cfarm-users] OT: Spectre and Meltdown cpu bugs

Paul Hargrove phhargrove at lbl.gov
Sat Jan 6 19:06:46 CET 2018


We all login to the CFarm system using ssh keys.
IF you use agent forwarding AND a key trusted elsewhere, you could be a
target of ssh-agent hijacking.

-Paul

On Sat, Jan 6, 2018 at 2:30 AM, Stas Boukarev via cfarm-users <
cfarm-users at lists.tetaneutral.net> wrote:

> Do people really process sensitive data on the compiler farm?
>
>
> On Sat, Jan 6, 2018 at 5:21 AM Jeffrey Walton via cfarm-users <
> cfarm-users at lists.tetaneutral.net> wrote:
>
>> Hi Everyone,
>>
>> It looks like PoCs are starting to be released for the CPU bugs. Or
>> there's a PoC in the wild for ARM processors. The farm may want to
>> accelerate deployment of the fixes if it has not done so.
>>
>> Early reports:
>> * https://amp.reddit.com/r/sysadmin/comments/7nl8r0/intel_bug_incoming/
>> * https://www.theregister.co.uk/2018/01/02/intel_cpu_design_flaw/
>>
>> Latest news:
>> * https://www.theverge.com/2018/1/4/16848976/how-to-protect-
>> windows-pc-meltdown-security-flaw
>>
>> Jeff
>> _______________________________________________
>> cfarm-users mailing list
>> cfarm-users at lists.tetaneutral.net
>> https://lists.tetaneutral.net/listinfo/cfarm-users
>>
>
> _______________________________________________
> cfarm-users mailing list
> cfarm-users at lists.tetaneutral.net
> https://lists.tetaneutral.net/listinfo/cfarm-users
>
>


-- 
Paul H. Hargrove <PHHargrove at lbl.gov>
Computer Languages & Systems Software (CLaSS) Group
Computer Science Department
Lawrence Berkeley National Laboratory
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.tetaneutral.net/pipermail/cfarm-users/attachments/20180106/2c986416/attachment-0001.html>


More information about the cfarm-users mailing list