I told you so. https://github.com/marcan/speculation-bugs#future-speculation …https://twitter.com/andywingo/status/1097418315570577408 …
Show this thread
-
Reminder: 10 bytes per second = your bank's authentication cookie in two seconds. From any random website running JavaScript. Shared address space VMs are dead. Firefox is a security risk until Project Fission is done. Should've started working on process isolation much earlier.pic.twitter.com/X40AiQp6TJ
Show this thread
-
-
Speculation is something you can plausibly deal with in security-critical code (e.g. file parsers) with *very* careful use of barriers and such (and it's *hard*). But JITs? Yeah, no, you're screwed. You need process isolation (and that still has side channels).
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
isn't eBPF JIT root-only by default on most widely used systems?
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.