3 ms·

I'm not a big asm guy but it feels like user control of speculation is a good outcome. Use it for situations where it doesn't matter and leave it in order for s

• Expurple 3y ago
  Aren't some of these speculation vulnerabilities exploitable from Javascript? This makes everyday web browsing "require security"
  • pjmlp 3y ago
    Some are, although they are relativily hard to exploit, as they require some JavaScript pattern that somehow will make the interpreter, or generated JIT code, have a sequence of machine code instructions that somehow trigger them. So much more hard to exploit than a typical native code application, however it is still possible when all ingredients are available, including skillful hacking skills.