4 ms·
Their point is untrusted code can still have private info (I don't want a random website to be able to steal my private key or my info like credit cards or pass
by czinck 4y ago
Their point is untrusted code can still have private info (I don't want a random website to be able to steal my private key or my info like credit cards or password in other tabs), so you need a new core for each website, which is obviously impractical.
- idle_zealot 4y agoMy point is that if you disable speculation on the insecure core then the websites can share without this class of exploit being a risk factor. There my be other vectors for accessing the data of colocated processes.