[issue42322] Spectre mitigations in CPython interpreter

2021-03-13 Thread Gregory P. Smith
Gregory P. Smith added the comment: Compiling everything (your entire OS and libraries and CPython itself) with compiler mitigations is recommended. I agree, there is nothing specific we need to do within CPython itself. -- nosy: +gregory.p.smith resolution: -> not a bug stage: ->

[issue42322] Spectre mitigations in CPython interpreter

2020-11-11 Thread Serhiy Storchaka
Serhiy Storchaka added the comment: AFAIK Spectre attacks rely on precise time measures. But Python is very far from bare hardware. Pure Python code is 10-100 times slower than compiled C or jitted JavaScript, and the variance is high, so it is hard to get stable results in benchmarks. Simpl

[issue42322] Spectre mitigations in CPython interpreter

2020-11-11 Thread STINNER Victor
STINNER Victor added the comment: You can try to use a C compiler which implements workarounds, but I don't think that anything should be done directly in CPython. -- nosy: +vstinner ___ Python tracker

[issue42322] Spectre mitigations in CPython interpreter

2020-11-11 Thread Amir Naseredini
New submission from Amir Naseredini : I was looking up everywhere and could not find any mitigations for Spectre attack by a Python interpreter(CPython)! I don't know if my question is correct or how feasible it is, but does anyone know if there are any mitigations for different variants of S