News for hackers. Stuff that matters.

A comment on Linus Torvalds: “Somebody is pushing complete garbage for unclear reasons.”. Parent comment

Re:Linus Torvalds: “Somebody is pushing complete garbage for... by IntelMiner on Monday January 22, 2018 @11:26AM (#16205575)
"Spectre is very difficult to exploit"

From what I've seen. There's been demonstrated attacks using Javascript in Chrome to dump the saved passwords from the browser using these bugs

If an attack is that easy to pull off, I don't think it's reasonable to make it an "opt in"

[ Parent | on HN ]
Re:Linus Torvalds: “Somebody is pushing complete garbage for... by syncsynchalt on Monday January 22, 2018 @04:05PM (#16207899)
Agreed, I keep hearing it's difficult yet user om2 on the webkit team says they were able to come up with multiple attacks internally in the webkit team once they'd heard about the trick [1].

Safari/webkit have since rolled out mitigations to prevent the attacks that they figured out but it puts the lie to the idea that Spectre is only a theoretical attack that we've yet to see an exploit for.

[1] https://news.ycombinator.com/item?id=16104831

[ Parent | on HN ]