Path: ...!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!eternal-september.org!.POSTED!not-for-mail
From: MarioCCCP <NoliMihiFrangereMentulam@libero.it>
Newsgroups: comp.os.linux.advocacy
Subject: Re: Torvalds Slams Theoretical Security
Date: Sun, 9 Feb 2025 13:35:21 +0100
Organization: A noiseless patient Spider
Lines: 49
Message-ID: <voa7e9$ksph$1@dont-email.me>
References: <pan$26699$6602b79b$4abe425a$df32a923@gnu.rocks>
Reply-To: MarioCCCP@CCCP.MIR
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Sun, 09 Feb 2025 13:35:25 +0100 (CET)
Injection-Info: dont-email.me; posting-host="23fc48759b63b3a75172ef3d76ed2d25";
	logging-data="684849"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX19lDseoyTgINvo7Mgr8czgb"
User-Agent: Mozilla Thunderbird
Cancel-Lock: sha1:Tqmdxudc85xga1v00tjfrhT70iI=
Content-Language: en-GB, it-IT
In-Reply-To: <pan$26699$6602b79b$4abe425a$df32a923@gnu.rocks>
Bytes: 3107

On 21/10/24 21:07, Lester Thorpe wrote:
> Distro maintainers, and their lackey consumers, who bloat their GNU/Linux
> distros with performance degrading security "features" should take note
> of the latest exclamations of Linus Torvalds:
> 
> "Honestly, I'm pretty damn fed up with buggy hardware and completely theoretical
> attacks that have never actually shown themselves to be used in practice."

Some facts : it seems that most recent Intel's advanced 
systems 1) have some millions circuits of unpredictable use 
and 2) a fully functional "minix" OS hardwired in the 
hardware and running at 0 (or negative) privilege level ... 
to do what ?
The Linux OS loaded later cannot even see all this, running 
on top of a magmatic ocean, with direct access to network 
chip too.
So, maybe, a lot of "attacks" could be operating daily 
without even being noticed, since they don't do direct damage.
And the kind of attack could be not intrusive, just DATA 
STEALING for surveillance goals, traveling stealthily from 
the machine to some vigilant ear somewhere.
But the even more sad truth is : there is nothing that the 
OS developers can do to mitigate this, not even to detect 
sth strange is happening.

> 
> https://linux.slashdot.org/story/24/10/21/1533228/linus-torvalds-growing-frustrated-by-buggy-hardware-theoretical-cpu-attacks
> 
> Tell 'em, Linus!  Those paranoid freaks are ruining desktop computing!
> 
> To keep my workstation free of these ridiculous "mitigations" I have
> to devote some slightly significant time -- and I don't like it.
> 
> At the very least, separate the desktop workstation from the public-facing
> sever as these have COMPLETELY DIFFERENT "security" concerns.
> 
> I am sick of these "the sky is falling" security-obsessed idiots.

well, the sky has just fallen, it's just that we pretend it 
is still there above :(

> 
> 


-- 
1) Resistere, resistere, resistere.
2) Se tutti pagano le tasse, le tasse le pagano tutti
MarioCPPP