PSA: Disable JavaScript. Meltdown/Spectre exploits are live

Re:PSA: Disable JavaScript. Meltdown/Spectre exploits are live by wvenable on Wednesday January 03, 2018 @11:42PM (#16068093)

> to discern to some extent the layout or contents of protected kernel memory areas.

For the end user, what possible negative consequences are there from this? It seems pretty far fetched that there could be any serious security implications from JavaScript on a desktop/mobile computer.

[ Parent | on HN ]

Re:PSA: Disable JavaScript. Meltdown/Spectre exploits are live by lossolo on Wednesday January 03, 2018 @11:53PM (#16068137)

Using spectre you can read memory from the process on which javascript is executed, for firefox this is probably whole browser memory, chrome runs sites in different processes (but not always ex iframes).

[ Parent | on HN ]