Path: ...!feeds.phibee-telecom.net!weretis.net!feeder6.news.weretis.net!tncsrv06.tnetconsulting.net!tncsrv09.home.tnetconsulting.net!.POSTED.omega.home.tnetconsulting.net!not-for-mail
From: Grant Taylor <gtaylor@tnetconsulting.net>
Newsgroups: comp.unix.shell
Subject: Re: on community building (Was: Re: Shell providers?)
Date: Fri, 8 Mar 2024 21:17:27 -0600
Organization: TNet Consulting
Message-ID: <usgkc7$jg2$1@tncsrv09.home.tnetconsulting.net>
References: <usef6b$1iemc$1@dont-email.me> <20240308013928.226@kylheku.com>
 <87ttlglxbu.fsf_-_@yaxenu.org> <20240308174219.574@kylheku.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Sat, 9 Mar 2024 03:17:27 -0000 (UTC)
Injection-Info: tncsrv09.home.tnetconsulting.net; posting-host="omega.home.tnetconsulting.net:198.18.1.140";
	logging-data="19970"; mail-complaints-to="newsmaster@tnetconsulting.net"
User-Agent: Mozilla Thunderbird
Content-Language: en-US
In-Reply-To: <20240308174219.574@kylheku.com>
Bytes: 2013
Lines: 29

On 3/8/24 19:48, Kaz Kylheku wrote:
> The era of secure multi-user computing is behind us;

Nonsense.

The era of the shell account's heyday is definitely behind us.

But -- ostensibly -- secure multi-user computing is alive and quite 
well.  RDP / VDI is very much a thing and those are multi-user computing.

My day job is supporting a farm of Solaris servers that clients log into 
interactively to run applications.

> we now know that processors cannot actually be trusted to enforce 
> their documented protection mechanisms like user/supervisor separation, 
> due to side channel attacks.

Not quite true.

The optimizations that have been introduced cause problems.

But disabling those optimizations significantly restores trust.

Also, that trust is largely an x86 specific issue.  There are other 
processor architectures that don't have the same issues.



-- 
Grant. . . .