4 ms·
The author doesn't explicitly mention turning off the mitigations for testing the exploit, but that might be the case here. The article is certainly vague enoug
by jusssi 6y ago
The author doesn't explicitly mention turning off the mitigations for testing the exploit, but that might be the case here. The article is certainly vague enough to not know for sure.
> Amusingly, this method is still working on an up to date Linux
This may refer to the whole thing working, or just the KASLR bypass part.
- 0x0 6y agoThat would be interesting to know more about. What's the point of paying the speed hit of spectre (and meltdown?) mitigations if they are ineffective?
- ungamed 6y agoBecause the current mitigations were believed to attack the known affected code paths.
- skynet-9000 6y agomitigations? you mean exploits?
- silly-silly 6y agos/attack/protect/
- Sunspark 6y agoIt's not worth it on older CPUs. I turned them off. I understand browsers already have some protection against them now. I don't see the point in slowing down the entire system, either I trust the apps I have or I don't. I don't believe a magic packet containing a melted down spectre is going to smash through my router and everything else and turn into skynet on my humble PC.