[webkit-dev] Meltdown and Spectre attacks

Michael Catanzaro mcatanzaro at igalia.com
Fri Jan 5 08:08:09 PST 2018


Hi,

Here's a collection of blog posts from other major browser vendors 
regarding the Meltdown and Spectre attacks:

https://blogs.windows.com/msedgedev/2018/01/03/speculative-execution-mitigations-microsoft-edge-internet-explorer/

https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/

https://sites.google.com/a/chromium.org/dev/Home/chromium-security/ssca

Notably, Edge and Firefox are reducing the resolution of 
performance.now(), and all three are disabling SharedArrayBuffer.

This is just a heads-up.

Michael



More information about the webkit-dev mailing list