3 ms·
Attacker: I can run any code on this machine? Time for speculation attacks! Attacker: Oh wait, I can run any code? I already own the machine...
by archipelago123 2mo ago
Attacker: I can run any code on this machine? Time for speculation attacks!
Attacker: Oh wait, I can run any code? I already own the machine...
- debugnik 2mo agoNot really, Spectre showcased an attack from within a JavaScript sandbox, which isn't considered to own the machine. Any side effects from speculation machinery can easily become a side-channel to infer values across security boundaries.
- samrus 2mo agoDid you forget about spectre and meltdown?