Re: [gentoo-hardened] Security Level: high/server/workstation/virtualization

[Kevin Chadwick]

On Fri, 27 Jan 2012 15:26:26 +0200
Alex Efros wrote:

Thanks for the info. In a discussion about malloc flags, it was
mentioned on the OpenBSD list that clearing the memory
immediately brought little in security as it would be cleared before
re-use and if anything could increase the chances of an attacker
writing to areas that he wanted to.

> Core2Duo

I don't know the details but according to OpenBSDs Theo, the Core2Duo
had some major design flaws that intel couldn't fix with microcode with
some security implications.