News for hackers. Stuff that matters.

A comment on CPU Usage Differences After Applying Meltdown Patch at Epic Games. Parent comment

Re:CPU Usage Differences After Applying Meltdown Patch at Ep... by canpan on Saturday January 06, 2018 @07:12AM (#16084945)
The Nintendo Switch generally only allows white-listed pages. So the attack vector is pretty small. The other consoles, yes, should be possible. But I think not too many people use their consoles for browsing.
[ Parent | on HN ]
Re:CPU Usage Differences After Applying Meltdown Patch at Ep... by TrickyRick on Saturday January 06, 2018 @07:23AM (#16084975)
It will show any captive WiFi-portal however so perhaps watch out for that.

In addition they do have a store with indie games which seems to be more or less open to anyone (I assume there are some checks but I wouldn't trust them completely) much like Steam.

[ Parent | on HN ]
Re:CPU Usage Differences After Applying Meltdown Patch at Ep... by bananaboy on Saturday January 06, 2018 @07:29AM (#16084989)
The requirements for getting onto the various platforms are pretty stringent. It's nowhere near as easy as getting onto Steam. You have to go through quite a rigorous certification process before you are allowed to ship your game on the online stores.
[ Parent | on HN ]
Re:CPU Usage Differences After Applying Meltdown Patch at Ep... by ryanplant-au on Saturday January 06, 2018 @02:48PM (#16087057)
The Switch only allows whitelisted pages, but sometimes loads them over HTTP (notably Puyo Puyo Tetris opens a web applet to http://sega.jp), so you can MITM yourself and load arbitrary content including your own JS.
[ Parent | on HN ]
Re:CPU Usage Differences After Applying Meltdown Patch at Ep... by philipwhiuk on Saturday January 06, 2018 @08:16AM (#16085131)
Only the hacker needs to do it for there to be a problem
[ Parent | on HN ]
Re:CPU Usage Differences After Applying Meltdown Patch at Ep... by StavrosK on Saturday January 06, 2018 @08:33AM (#16085171)
I wonder if you can use Spectre to steal signing keys from the device and jailbreak them. I guess they probably only have the public keys though, for verification.
[ Parent | on HN ]