6 ms·
It's a good thing no one will be running other people's untrusted code on their servers ..... Except for etherium contracts of course .... Anyone want to place
by Taniwha 9y ago
It's a good thing no one will be running other people's untrusted code on their servers ..... Except for etherium contracts of course .... Anyone want to place bets on how long it takes before someone releases a spectre exploit in a contract? I'll take 4 days ....
- dbancajas 9y agoEvm is a stack based machine with no speculative execution. It has no concept of a process. I find it impossible to think how spectre can be implemented.
- Taniwha 9y agothe machine is still implemented with machine code, it might even be JIT'd ... after all people have used spectre from JS
- gm-conspiracy 9y agoIt is my understanding that JS provides a higher resolution of temporal comparison, which makes the exploit possible.