News for hackers. Stuff that matters.
Re:PSA: Disable JavaScript. Meltdown/Spectre exploits are live by FreedomWarrior on Wednesday January 03, 2018 @11:37PM (#16068073)
You started this thread to warn about the risks of running untrusted JavaScript before the appropriate mitigations are in place, yet you expect people to open a PDF from misc0110.net with no additional context?
Re:PSA: Disable JavaScript. Meltdown/Spectre exploits are live by kimusan on Thursday January 04, 2018 @04:02AM (#16068908)
Its actually the page of one of the researchers (Michael Schwarz) who found the javascript keystroke timing attack (which is in the paper in the link). He is also one of the authors of the Meltdown/Spectre CPU Attack papers so the document is actually worth reading
Re:PSA: Disable JavaScript. Meltdown/Spectre exploits are live by rainbowmverse on Thursday January 04, 2018 @11:08AM (#16071400)
The link goes to a site with a spammy-looking domain, and there's no reason to assume a URL with .pdf at the end is actually a PDF. There's nothing stopping the server from serving a malicious JavaScript file instead.

Assuming it's safe based on available information is very bad. Even your comment isn't enough because you could be working with someone to drive people to a malicious link.