Return-path: <ak@linux.intel.com>
Received: from mga02.intel.com ([134.134.136.20])
	by Galois.linutronix.de with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA256:256)
	(Exim 4.80)
	(envelope-from <ak@linux.intel.com>)
	id 1fDJFZ-0007VL-RF
	for speck@linutronix.de; Tue, 01 May 2018 02:34:34 +0200
Date: Mon, 30 Apr 2018 17:34:29 -0700
From: Andi Kleen <ak@linux.intel.com>
Subject: [MODERATED] Re: [patch V8 15/15] SSB 15
Message-ID: <20180501003429.GM75137@tassilo.jf.intel.com>
References: <20180430150423.180110059@linutronix.de>
 <20180430151233.029064226@linutronix.de>
 <20180430221547.GH8398@outflux.net>
MIME-Version: 1.0
In-Reply-To: <20180430221547.GH8398@outflux.net>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
To: speck@linutronix.de
List-ID: <speck.linutronix.de>

> I'm uncomfortable with the idea that people can only fix SSB by having both
> the right hardware AND having software that knows to call the needed
> prctl. That is double opt-in. :( It leaves their old browsers vulnerable,
> for example.

Old browsers are vulnerable anyways. If you don't update
your browser you have much worse problems than this.

Same with other software. A lot of software will need updates for
Spectre v1 (which is much simpler to exploit than this), and just plain
old buffer overflows. If you don't get updates you already have
far more problems.

-Andi