Hacker News Reader

It would be nice if we were able to do this for specific cores, and then somehow assign critical applications to secure cores and regular applications to performance cores

View on HN

I've been wondering why we haven't seen a linux kernel scheduler yet that'll SMT colocate only threads of the same process. Derisk the SMT-based attacks by making the only targets be "self".

(Or processes of the same user in the same namespaces, or some such criteria for "mutually trusting" processes.)

you could get two machines

You mean like a heterogeneous cluster? Do you have suggestions on how to manage load deployment on such a topology based on how security critical the application is

That actually sounds straightforward in most job scheduling software that I've seen; just tag the hosts "nomitigations"/"mitigations_on" or so, and set constraints on where jobs are scheduled to match.

Reply on news.ycombinator.com