[webkit-dev] Meltdown and Spectre attacks
Michael Catanzaro
mcatanzaro at igalia.com
Fri Jan 5 08:08:09 PST 2018
Hi,
Here's a collection of blog posts from other major browser vendors
regarding the Meltdown and Spectre attacks:
https://blogs.windows.com/msedgedev/2018/01/03/speculative-execution-mitigations-microsoft-edge-internet-explorer/
https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/
https://sites.google.com/a/chromium.org/dev/Home/chromium-security/ssca
Notably, Edge and Firefox are reducing the resolution of
performance.now(), and all three are disabling SharedArrayBuffer.
This is just a heads-up.
Michael
More information about the webkit-dev
mailing list