4 ms·
Browsers have mitigations in place, don't they? Aren't they enough, at least on paper?
by cosarara 7y ago
Browsers have mitigations in place, don't they? Aren't they enough, at least on paper?
- mikedelfino 7y agoI can't provide proper citations right now but there has been working exploits of some the latest CPU bugs using just Javascript in a browser as if we're browsing regular websites.
- cosarara 7y agoIf you could provide citations at some other time that would be great!
- SAI_Peregrinus 7y agoNot if hyperthreading is enabled. The point is that it's a hardware flaw, so any software mitigations can be bypassed.
- cosarara 7y agoIs there a PoC exploit for current firefox that would work if I set mitigations=off and enable HT on linux, for instance?