Slashdot Mirror

← Back to Domains

Domain: xenproject.org

Stories and comments across the archive that link to xenproject.org.

Comments · 5

  1. Re:Missing Linux Feature: Seamless OS Crossing by TheRealMindChild · · Score: 1 · on Microsoft Open Source Tool Lets You 'Bring Your Own Linux' To Windows (microsoft.com)

    There probably are fully FOSS ones too but I'm not as well versed.

    Xen

  2. Re:What about root kits? by sl3xd · · Score: 1 · on Nope, No Intel Chip Recall After Spectre and Meltdown, CEO Says (cnet.com)

    I'm not quite sure what you mean by "VT" -- do you mean Intel's VT-x?

    It's probably best to let the Xen folks explain far better than I could hope to.

    Quemu has their own explanation (and I think KVM is included in the explanation)

    I get the feeling that the virtualization instructions (VT-x, AMD-V, and whatever the equivalents are on s390, ARM, and POWER) aren't really involved with either Spectre or Meltdown.

    I wonder about SPARC, but given Oracle & Fujitsu appear to be killing SPARC... it probably doesn't matter.

  3. Re:This cannot happen accidentally by Pseudonym · · Score: 3, Informative · on Socat Weak Crypto Draws Suspicions Of a Backdoor (threatpost.com)

    It easily can happen accidentally. The probability of a bug in your implementation of the Miller-Rabin test (for a general "you") is quite high.

    Now look at the history here. The patch was submitted by someone who admitted "I don't have enough knowledge to implement the merge", and was accepted without any serious review. Looking at my own history of screwing up commits, it's fairly easy to see how this might have happened.

    I'm just lucky that none of mine had implications that serious. There but for the grace of His Noodly Appendage...

  4. Awesome marketing... by andyhhp · · Score: 1 · on AMD Outlines Plans For Zen-Based Processors, First Due In 2016

    Because it is not like there is another Xen around in the world of servers...

  5. Re:No by WaffleMonster · · Score: 1 · on Xen Cloud Fix Shows the Right Way To Patch Open-Source Flaws

    Have you actually read the Xen Project's policy at http://www.xenproject.org/secu... - it is really quite inclusive and doesn't really discriminate against small service providers.

    This is one of those games you can't win.

    Being inclusive means your opsec is shit and you have effectively blabbered to *everyone* who has a stake in knowing. A secret known by all is no secret.