5 ms·
> "Using CPU jitter is a clever solution. I hope it stands up to scrutiny." How safe is it to use CPU jitter in a virtual machine?
by uasm 7y ago
> "Using CPU jitter is a clever solution. I hope it stands up to scrutiny."
How safe is it to use CPU jitter in a virtual machine?
- jfindley 7y agoSafe as in safe from host interference? Not at all. But if your VM is running on a malicious host, you have bigger problems honestly.
- stefan_ 7y agoThis is kind of the ongoing joke here, yeah? Like HN users will gladly spend hours discussing the merits of various random number generation schemes, why that Intel HWRNG is probably backdoored and we should all be very afraid, all the while running their micro-services on the cloud where their entropy is literally spoon-fed from the hypervisor. SMC call into code-you-can't-see and back comes pure entropy (trust us)!
- pjc50 7y agoYes, although there's two kinds of VM safety people might care about. By using a VM you accept that the bare metal owner can look into it if they want to and you have to trust them not to. However, that doesn't mean accepting attacks from other customers - which was what all the Spectre/Meltdown risk was primarily about.