3 ms·
You talking about the Update they released some days ago? Or those who are several months old? Apple released a new one for the newest vulnerability so they di
by Asmod4n 7y ago
You talking about the Update they released some days ago? Or those who are several months old?
Apple released a new one for the newest vulnerability so they didn’t have to reduce the performance of macOS by ~30%.
- msbarnett 7y agoI’m talking about the Chrome v8 team’s white paper on why they are giving up on trying to mitigate Spectre class attacks in software, which mentions, among other issues: > Fourth, we found that effective mitigation of some variants of Spectre, particularly variant 4, to be simply infeasible in software, even after a heroic effort by our partners at Apple to combat the problem in their JIT compiler. Apple released an update with some mitigations, but they are by no means perfect, and their message is that if you want to truly be safe, either don’t run JS, or disable hyperthreading.