News for hackers. Stuff that matters.

A comment on iLeakage: Browser-Based Timerless Speculative Execution Attacks on Apple Devices. Parent comment

Re:iLeakage: Browser-Based Timerless Speculative Execution A... by matthewdgreen on Wednesday October 25, 2023 @02:01PM (#38015988)
They reported it to Apple a long time ago, over a year I think. The problem appears to be that it's very hard to mitigate.

ETA: To be clear, this isn't me speculating. I spoke with one of the authors and asked this specific question. Apple hadn't shared the mitigation with them as of a few days ago.

[ Parent | on HN ]
Re:iLeakage: Browser-Based Timerless Speculative Execution A... by fh9302 on Wednesday October 25, 2023 @02:05PM (#38016044)
Thank you. Do you know if lockdown mode / disabling JIT would mitigate the issue?
[ Parent | on HN ]
Re:iLeakage: Browser-Based Timerless Speculative Execution A... by matthewdgreen on Wednesday October 25, 2023 @02:29PM (#38016406)
From what I’m told disabling JIT might do the job. With consequences to things breaking down.
[ Parent | on HN ]
Re:iLeakage: Browser-Based Timerless Speculative Execution A... by saagarjha on Friday October 27, 2023 @05:41AM (#38036445)
Disabling JIT would make it substantially harder to exploit.
[ Parent | on HN ]