Re:Cloud companies consider Intel rivals after security flaw...
by lixtra on Saturday January 13, 2018 @10:33AM
(#16139911)
I assume those save language would still fail to defend against spectre. The problem is that the „code path with data“ executed in a speculative branch is not considered by the compiler but „fantasized“ by the cpu.
Remember that Spectre can be exploited through JavaScript JIT. The JS sandbox is quite comparable to the models used for save languages.
Perhaps by making it unnecessary, rather than ignoring it - SPIN is now over 20 years old:
http://www-spin.cs.washington.edu/
There are other single-address-space safe-language systems that are even older; Genera is from the early '80s.