> Dismissing it without consideration for mitigations is malicious IMO. But this is par for the course in certain circles who put performance above security fo

> Dismissing it without consideration for mitigations is malicious IMO. But this is par for the course in certain circles who put performance above security for literally decades, because performance is easy to measure (and therefore optimize!), and security isn't. It's the exact same reason we've been gaslit with FUD about needing to write all system software in unsafe languages. Now the chickens are coming home to roost. All those corners we cut to save some memory, some time, or some money are back to haunt us--at every level of the stack. Enjoy the meltdown :)