According to a report here, Hyper-Threading, as currently implemented on Intel Pentium Extreme Edition, Pentium 4, Mobile Pentium 4, and Xeon processors, suffers from a serious security flaw. This flaw permits local information disclosure, including allowing an unprivileged user to steal an RSA private key being used on the same machine. Administrators of multi-user systems are strongly advised to take action to disable Hyper-Threading immediately; single-user systems (i.e., desktop computers) are not affected.
The flaw originally discovered in October 2004 has now been fully disclosed including proof of concept exploit code. The following vendors have responded:
Intel have commented about the advisory but so far there has been no response from Microsoft.
View: 
-1 Comments - Add comment