lainchan / sec

Only Firefox Spectre patches work

Debbie Charteris · 2018-06-29 12:38
>Implications >In this presented research we were able to show that even with the implemented Spectre mitigations, we were able to: >Read speculatively accessed memory in Chrome at around 1 bit per second. >Read accessed memory in Edge (not speculatively accessed) at around 1 bit per second. >Read accessed memory in Safari (not speculatively accessed) at around 1 bit per second. Money quote: >We were not able use these techniques in Firefox, as they recently reduced the timer resolution to 2ms Source: https://alephsecurity.com/2018/06/26/spectre-browser-query-cache/ Now name me one good reason why people in here actually use Chrom(ium) Sure it is """only""" 1bit/s but that is enough if you know where to look. Especially that some people have their browser open for hours. If Google, Apple and MS push a fix they should at least not fuarrrk it up again.
demoscene · 2018-06-29 12:50
I imagine the majority of lains turn off JS anyway.
Project 2501 · 2018-06-29 13:01
talk about being inefficient at writing native extensions
Ivan Horvat · 2018-08-12 16:59
no info for Opera?
fsociety · 2018-08-15 02:07
>>4988 I used to but you can't properly navigate through posts and their replies if you do that.
Unnamed · 2018-08-16 04:25
>>4987 It's nice that firefox's spectre patches work, but in general firefox has more exploits. It always falls faster than chrome at competitions
Sipho Nkosi · 2018-08-16 05:12
>>4988 Not only disable the JS But running A53 quad core I'll give FF another try maybe But it was crashy on ARM when 57 landed Maybe it has improved some by now
Incognito · 2018-08-16 09:27
>>5591 AliExpress botnet