3 ms·
Unless, of course, the site you trust is hosted in a shared hosting VM which is also vulnerable to spectre or meltdown. In which case, you can’t trust the scrip
by meepmorp 9y ago
Unless, of course, the site you trust is hosted in a shared hosting VM which is also vulnerable to spectre or meltdown. In which case, you can’t trust the scripts.
- XR0CSWV3h3kZWg 9y agospectre can read, not write.
- dtparr 9y agoIf it can read the right data (private keys, etc.), then it can write whatever it wants.
- anfilt 9y agoWhat if I read the sites TLS/SSL keys? I could MITM the connection and inject JS to do more malcious thing. Or even easier get the ssh key for the VM. Then do what ever I want.
- meepmorp 9y agoIf I can read arbitrary data, what’s stopping me from reading the credentials I need to write data?