Delphi Patch for Meltdown and Spectre
Delphi Patch for Meltdown and Spectre
A potential customer evaluating our software asked what we do "agains Meltdown and Spectre".
My first reaction was to answer "patch your OS, this is not an App-Level question". But then I found the /Qspectre MSVC compile switch and hesitated to answer before cross checking.
https://linustechtips.com/main/topic/897748-microsoft-patches-visual-c-against-meltdown-and-spectre-and-advises-developers-to-patch-their-apps-and-games/
regards Günther
A potential customer evaluating our software asked what we do "agains Meltdown and Spectre".
My first reaction was to answer "patch your OS, this is not an App-Level question". But then I found the /Qspectre MSVC compile switch and hesitated to answer before cross checking.
https://linustechtips.com/main/topic/897748-microsoft-patches-visual-c-against-meltdown-and-spectre-and-advises-developers-to-patch-their-apps-and-games/
regards Günther
More details on Microsoft's compiler fix
ReplyDeletehttps://arstechnica.com/gadgets/2018/02/microsofts-compiler-level-spectre-fix-shows-how-hard-this-problem-will-be-to-solve/
So it is just a mitigation against one form of attack, with no guarantees.
It sounds like the only complete fix will be to get new CPUs, as soon as the new CPUs with Spectre fixes arrive, and as soon as it is confirmed the new CPUs do actually fix all Spectre vulnerabilities...
Eric Grange Thank you for the link. The Microsoft compilers are used for the OS itself. There it makes sense to improve (still all very hypothetical) the situation as millions of workstations run the same exes and dlls. But the exact attack scenario via a delphi exe and the read ahaed cache of the CPU ... somehow far away from my imagination.
ReplyDelete