News for hackers. Stuff that matters.

A comment on Intel CPUs impacted by new PortSmash side-channel vulnerability.

Re:Intel CPUs impacted by new PortSmash side-channel vulnera... by stephenr on Friday November 02, 2018 @01:01PM (#18364691)
It seems that for 'personal' devices (i.e. laptops/desktops), the biggest vulnerability here is probably actually javascript.

You can be smart about what software you run, but most people don't use the web without JS.

Maybe it's time for javascript to be 'off by default'.

[ Parent | on HN ]
Re:Intel CPUs impacted by new PortSmash side-channel vulnera... by dijit on Friday November 02, 2018 @07:01PM (#18367431)
I got heavily downvoted for suggesting that maybe google shouldn't be forcing JS for login yesterday.

I feel somewhat vindicated with this, however the fact remains that the web today doesn't really work without JS. I don't see that changing for any reason other than it offering a better (or more consistent) experience, but that requires web developers to support that. Which I don't see happening any time soon.

[ Parent | on HN ]
Re:Intel CPUs impacted by new PortSmash side-channel vulnera... by stephenr on Saturday November 03, 2018 @08:27AM (#18369876)
Welcome to the hive mind.
[ Parent | on HN ]