Yes (lowest vCPU seems to be 2 everywhere), and that protects against this attac... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

yencabulator on July 25, 2023 | parent | context | favorite | on: Zenbleed

Yes (lowest vCPU seems to be 2 everywhere), and that protects against this attack. However, this thread was talking about airgapping hosts, which is needed for the general threat of VM escapes.

fulafel on July 25, 2023 [–]

At least Fargate and Lightsail can select < 2 vCPU. (and maybe micro EC2 instance types?)

yencabulator on July 25, 2023 | [–]

Well, that does sound like those were vulnerable then, if they happened to run on Zen 2. (Obviously microcode patched by now.)

As usual, cost is the biggest hindrance to security.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact