Spectre and Meltdown are genuinely nasty to *fix*, but there's not a nation state with a cyber program that needs either for local privilege escalation (let alone information disclosure). But sweeping fixes for Spectre and Meltdown are likely to help with other issues as well.https://twitter.com/MalwareJake/status/952203407602999297 …
-
Show this thread
-
Replying to @dakami
Doesn't this line of thinking imply that every competent nation state has privilege escalation vulnerabilities/methods for every operating system they encounter? Otherwise, wouldn't think Spectre/Meltdown would be useful to them?
2 replies 0 retweets 0 likes -
-
Replying to @dakami @MalwareJake
JS not Chrome? Absolutely. JS Chrome? I'll shave a few points of confidence off that. But you know, Mossad. They want you dead, you're dead. Cyber drops the bar wayyyyyyyyyyy below that.
3 replies 0 retweets 2 likes
Replying to @dakami @MalwareJake
I'm 100% sure any competent nation state has JS chrome exploits. Of course, most nation states *are* incompetent, but we have enough competent ones to worry about.
3:58 PM - 13 Jan 2018
0 replies
0 retweets
2 likes
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.