Meltdown Proof-of-Concept

Re:Meltdown Proof-of-Concept by martin1975 on Tuesday January 09, 2018 @04:17PM (#16110192)

and what if I wrote a compiler that doesn't heed any of your security concerns? It would still compile to machine code and continue to be able to exploit things Spectre/Meltdown style? Or am I off here?

[ Parent | on HN ]

Re:Meltdown Proof-of-Concept by white-flame on Tuesday January 09, 2018 @04:58PM (#16110541)

You'd only be able to run it on your system. At least, without other means of breaching the low level secured configuration of someone else's machine, because that's where the One True Compiler for that system lives.

[ Parent | on HN ]

Re:Meltdown Proof-of-Concept by gumby on Tuesday January 09, 2018 @04:49PM (#16110460)

If I were taking this approach I might not even tell you the instruction set of the machine, so your compiler wouldn’t be useful.

[ Parent | on HN ]

Re:Meltdown Proof-of-Concept by XorNot on Tuesday January 09, 2018 @04:47PM (#16110438)

I think the idea is you just never accept foreign machine code.

[ Parent | on HN ]