[dead]
Re:Reading privileged memory with a side-channel
by gatmne on Wednesday January 03, 2018 @11:37PM
(#16068079)
>RMS remains a rambling nutjob and none of this is really applicable to the issue at hand.
Ramblings that this industry has repeatedly proven to be correct, and continue to do so. I'd take his ramblings over a cheap ad hominem any day.
I encourage you to try being more civil the next time you comment on this site.
Re:Reading privileged memory with a side-channel
by nasredin on Thursday January 04, 2018 @03:41AM
(#16068835)
A "rambling nutjob" that has been proven correct time and time and time again.
We need more people with RMS-type views in Google, Facebook, etc.
Re:Reading privileged memory with a side-channel
by tarruda on Wednesday January 03, 2018 @07:18PM
(#16066806)
The spectre attack is exploitable via javascript and there's no software patch that can fix it. IoW, it is not possible to safely run untrusted code in the same computer that has sentitive information.
> I am careful in how I use the Internet.
> I generally do not connect to web sites from my own machine, aside from a few sites I have some special relationship with. I usually fetch web pages from other sites by sending mail to a program (see https://git.savannah.gnu.org/git/womb/hacks.git) that fetches them, much like wget, and then mails them back to me. Then I look at them using a web browser, unless it is easy to see the text in the HTML page directly. I usually try lynx first, then a graphical browser if the page needs it (using konqueror, which won't fetch from other sites in such a situation).
Ref: https://stallman.org/stallman-computing.html