<!-- https://zerolog.ch/news/no-shared-processor-cores -->
# Workspaces no longer share processor cores with other machines

2026-10-06 · Security

> The machines that run ZeroLog workspaces now keep their processor cores and memory pages to themselves, which closes two known ways of observing a neighbour through shared hardware.

A physical processor core runs two hardware threads. Until today, a ZeroLog machine could run on one half of a core while a different machine ran on the other half. Researchers have shown that this kind of sharing can let one machine learn things about another.

Now the machines that run workspaces get their own scheduling group. The operating system never runs them at the same moment as anything else on the same core. The rest of the hardware keeps working as before.

Memory works the same way. The host can merge identical memory pages between machines to save space, and that merging can also leak information. It is now switched off for the ZeroLog machines and takes effect as each machine restarts.

Nothing changes in how you use ZeroLog. Details are on the [isolation page](https://zerolog.ch/docs/isolation).
