WebLLL

2 ms·

1. 1.▲
   by WebLLL 9y ago

   Ok, but if a working web browser POC is not worthy of a bug bounty reward, because they claim to already know, then what is the point of the bug bounty? Why are they not just paying for specialists to advise them on how to fix this if they
2. 2.▲
   by WebLLL 9y ago

   Fact is they are still patching away! And yes I have seen no public disclosure on many of the problems. Try asking Intel for help, it is a brick wall. My guess is that they made a huge mistake, that they thought that high precision timers w
3. 3.▲
   by WebLLL 9y ago

   The offer is limit to bugs that are not already known to Microsoft or their partners, and they are not disclosing what these bugs are, and they are making no claim to have fixed them. I made a submission to Intel and others weeks after some
4. 4.▲
   by WebLLL 9y ago

   Precise timers are not needed, but they improve the data rate. For an efficient technique to bypass timer mitigation and a proof of concept see https://weblll.org/index.php/spectre-cascade-there-may-be-no...
5. 5.▲
   Spectre Cascade – there may be no safe timer mitigation(weblll.org)

   1 points by WebLLL 9y ago|0 comments