“SEV not intended to be protective” is the biggest load of horseshit I’ve heard, even intel didn’t beat around the bush with actually admitting they had flaws and patching them.
Amd didn’t patch the take-a-way or prefetch+TLB bleed either, because shipping a secure processor would have hurt their benchmark scores too much. So they just continued to ship insecure-by-default (and recommend against enabling the mitigations by default) those other times too.
“SEV not intended to be protective” is the biggest load of horseshit I’ve heard, even intel didn’t beat around the bush with actually admitting they had flaws and patching them.
Amd didn’t patch the take-a-way or prefetch+TLB bleed either, because shipping a secure processor would have hurt their benchmark scores too much. So they just continued to ship insecure-by-default (and recommend against enabling the mitigations by default) those other times too.