spectre and the end of langsec ~~ https://wingolog.org/archives/2018/01/11/spectre-and-the-end-of-langsec …
-
-
And these kinds of CPUs won't arrive a minute too soon :)
-
And still, it's a sound win for langsec if we've pushed bugs so far that we now have to look at hardware bugs.
-
No, there's still plenty of low-hanging fruit. Consider that paper I tweeted the other day about parser differentials in X.509 hostname verification.
-
Totally not calling that we're there yet. But even if we were, the premise of the above article would be wrong.
End of conversation
New conversation -
-
-
Erm, I meant a nanosecond too soon :)
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.