Intel CPUs impacted by new PortSmash side-channel vulnerability

Re:Intel CPUs impacted by new PortSmash side-channel vulnera... by josefx on Friday November 02, 2018 @01:02PM (#18364697)

I don't need to be in the 1990s, I just wished websites wouldn't need to draw from ~200 untrusted sources and possibly worlds largest malware distribution channel to show some ads from even less trusted sources right next to badly formatted text.

[ Parent | on HN ]

Re:Intel CPUs impacted by new PortSmash side-channel vulnera... by SolarNet on Friday November 02, 2018 @01:54PM (#18365143)

I mean the text is probably from poorly trusted sources as well but that's a different problem.

[ Parent | on HN ]

Re:Intel CPUs impacted by new PortSmash side-channel vulnera... by dijit on Friday November 02, 2018 @06:56PM (#18367402)

but text has a limited attack scope compared to say: an entire interpreted language and DOM.

[ Parent | on HN ]

Re:Intel CPUs impacted by new PortSmash side-channel vulnera... by y4mi on Friday November 02, 2018 @02:48PM (#18365613)

> I just wished websites wouldn't need to draw from ~200 untrusted sources

That's just how it is though. Even if you're using vanilla js.

Don't get me wrong, I know what you mean... it's just that it's really hard to actually find arguments for that... philosophy

At this point, I think it doesn't really matter as long as your site has a good ux.. which is obnoxiously hard to measure

[ Parent | on HN ]