I told you so. https://github.com/marcan/speculation-bugs#future-speculation …https://twitter.com/andywingo/status/1097418315570577408 …
Show this thread
-
(And don't get me started on terrible ideas like eBPF JIT in the kernel)
Show this thread
Speculation is something you can plausibly deal with in security-critical code (e.g. file parsers) with *very* careful use of barriers and such (and it's *hard*). But JITs? Yeah, no, you're screwed. You need process isolation (and that still has side channels).
-
-
has the fallout hit nodejs and non-apache-builtin PHP yet
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Hypervisors and watchdogs with out of bounds(MMU) page encryption and hashing works too. Predicting a Apple implementation in near future..
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.