[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Spectre/Meltdown impact on network devices

On Sun, Jan 7, 2018 at 8:57 PM, Masataka Ohta <
mohta at necom830.hpcl.titech.ac.jp> wrote:

> William Herrin wrote:
>> Meltdown and Spectre are privilege escalation flaws. If you can induce the
>> physical hardware to run arbitrary code you provide at an unprivileged
>> level, they can be used to extract information from other processes or
>> virtual machine containers running at different (higher) privilege levels.
> So, spectre should be fatal to cloud business.

Doubt it. But they are the ones who'll have to scramble fastest to patch.

It's also really giving browser devs a bad day since it provides yet
another escalation out of the javascript sandbox.


William Herrin ................ herrin at dirtside.com  bill at herrin.us
Dirtside Systems ......... Web: <http://www.dirtside.com/>