6 ms·
… and you will do nothing, because you can do nothing.
by kevinherron 5y ago
… and you will do nothing, because you can do nothing.
- enchiridion 5y agoWell... aren't these attacks only a concern if you have adversarial code running on adjacent cores? So for a desktop user the threat model really doesn't change. Just do your best to keep malicious programs off of your machine. If someone can already run a speculative execution attack against you're local machine, there are much easier attacks to run.
- 4ad 5y ago> Just do your best to keep malicious programs off of your machine. So don't visit the web then.
- acdha 5y agoHow closely have you followed the layers of mitigations which the major browser engines have implemented? I think a more interesting form of this question is asking how often people are exposed to malicious code which isn't covered by the browser sandboxes.
- enchiridion 5y agoIs there any record of web-based attacks like this?
- magila 5y agoNot AFAIK. There are contrived PoCs of browser based Specter exploits, but no practical examples have been discovered.
- staticassertion 5y agoBrowser vendors have been pretty quick to add mitigations, disable attack surface, etc. Someone comes up with a new way to attack systems via JS, but vendors are all headed in a safer direction.
- silon42 5y agoDisable JS by default.
- jnwatson 5y agoEvery web page you visit allows a “malicious program” to be run on your machine.