spectre was a good name i think because this is a security bug that went un-noticed for decades, so it could be described as stealthy, like a ghost
-
Variant 1 ("Spectre") is the mess (direct branch misprediction), Variant 2 ("Spectre" again, whyyy) is the misprediction training thing (fixable CPU bug), Variant 2 ("Meltdown") is the reading RAM from the kernel thing (fixable, blatant Intel bug).
To somewhat further confuse things, you can combine Variant 1 and Variant 3 into the same exploit to do things like read kernel RAM from Javascript. Then you're leveraging both issues at the same time (they fit together nicely).
-
-
does the fact that you're the first person to explain it in a way that makes sense prove that techwriters are bad or that i'm bad at using google
-
This is why I'm frustrated at how the Spectre/Meltdown guys self-appointed themselves as the media source for this mess and put out a shitty website with shitty FAQs and shitty names and incomplete papers, even though they were *months later* than everyone else.
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.