Intel x86 considered harmful – survey of attacks against x86 over last 10 years

Probably worth pointing out that the author is the project lead of Qubes, one of the very few promising projects in the vast wasteland of computer security.

Very few? Seriously?

Seriously. The vast majority of computer security effort is wasted on things like the advisory-and-patch cycle, pen testing, and virus scanning, which can never, by their very nature, provide computer security. That's not to say you don't have to do them — it's just that they're not productive.

Oh, I understand now and I agree wholeheartedly.

There's been some exciting progress in the formal verification department in recent years, though.