4 ms·
We need a way to switch mitigations on/off on per-process basis. I don't want mitigations when I run the computation-heavy code I have written myself but do wan
by qwerty456127 6y ago
We need a way to switch mitigations on/off on per-process basis. I don't want mitigations when I run the computation-heavy code I have written myself but do want them when I run a browser or other Internet-connected apps.
- ud_0 6y agoI agree. I want these turned on for shared servers and on the consumer on OS processes that I don't trust. But I would want an option to turn it off for JavaScript-heavy sites that I do trust. I'm frankly amazed that the mitigations so far have not already been disastrous to performance. Either we accept drastically less performance from now until basically forever, or we adopt a more fine-grained security model.
- qwerty456127 6y ago> turn it off for JavaScript-heavy sites that I do trust How can you trust any?
- speedgoose 6y agoDownloading a software trough http and executing it on your operating system is not very different than downloading a software through http, and executing it inside your web browser virtual machine.
- saddlerustle 6y agoPR_SET_SPECULATION_CTRL
- exabrial 6y agoNice I learned something today. How is that used currently in relationship to browsers or stuff like signed desktop apps that don't execute third party code?