3 ms·
I've got to somewhat agree with that. Meltdown and spectre were very serious, but were also branded and marketed specifically to be "viral". Also, web browser
by mises 8y ago
I've got to somewhat agree with that. Meltdown and spectre were very serious, but were also branded and marketed specifically to be "viral". Also, web browsers, possibly the single biggest risk, were patched separately iirc.
- flatiron 8y agothey were but i guarantee they were tested on systems with mitigations in place so who knows what the result is when ran on systems with the mitigations turned off. that being said, i just disable javascript and only turn it on when i need to.
- paavoova 8y agoSome, such as Google developers, have said these vulnerabilities can't be fixed in software: https://arstechnica.com/gadgets/2019/02/google-software-is-never-going-to-be-able-to-fix-spectre-type-bugs/ https://arstechnica.com/gadgets/2019/02/google-software-is-n... And it's ridiculous to give credence to the idea that the people pushing software mitigations to Linux, and the maintainers merging them, are doing so in bad faith.
- AnIdiotOnTheNet 8y agoBad faith is unlikely. Overzealous sacrificing of performance for nebulous gain in a large mount of use cases is, however, quite likely.