fearpoint
roflmao the AMD fanboy hysteria is hilarious.
 
Thanks for the laughs.

ty_ger07

kram36
Okay, so no real world uses and damage "reported" so far. Phew, I was going to set my hair on fire with all the chaos these exploits were causing.

No real-world uses? Are you serious? People have demonstrated the vulnerability is exploitable simply by visiting a malicious website with no elevated permissions or pre-existing compromises required. I would say that is an extremely bad real-world use. Do you use a browser to browse the web? You are potentially vulnerable to leaking all the contents of your system memory to the owner of the website. That's a real-world use.

If/when that happens, you won't know it. You probably won't notice until months later that your accounts, details, network, or anything else was compromised. And once you do realize a compromise, it will be hard to know the source of the compromise and trace it back to this specific vulnerability. What they do in these sorts of situations is mine a bunch of data from as many users as possible, and then sift through it looking for interesting targets, interesting compromises, and interested buyers of the data. Don't expect reports any time soon.

EyeDeeNo

ty_ger07

kram36

ty_ger07

kram36
Okay, so no real world uses and damage "reported" so far. Phew, I was going to set my hair on fire with all the chaos these exploits were causing.

No real-world uses? Are you serious? People have demonstrated the vulnerability is exploitable simply by visiting a malicious website with no elevated permissions or pre-existing compromises required. I would say that is an extremely bad real-world use. Do you use a browser to browse the web? You are potentially vulnerable to leaking all the contents of your system memory to the owner of the website. That's a real-world use.

If/when that happens, you won't know it. You probably won't notice until months later that your accounts, details, network, or anything else was compromised. And once you do realize a compromise, it will be hard to know the source of the compromise and trace it back to this specific vulnerability. What they do in these sorts of situations is mine a bunch of data from as many users as possible, and then sift through it looking for interesting targets, interesting compromises, and interested buyers of the data. Don't expect reports any time soon.

Lab demonstrations, yes. Any real world chaos for these exploits, nope. These have been known long enough to be out and causing chaos by now and reported on. Go ahead and set your hair on fire, since you think all your data has already been compromised.

You are insane.
Working code. No elevated permissions required. No additional app required. No pre-existing compromises required. Undetectable by anti-virus. Is capable of accessing absolutely any portion of system memory. Can be implemented in multiple programming languages and inserted into a nearly limitless number of apps. Few solutions are available if not provided from manufacturer's patches. Browsers were patched right away to limit the exploit, but are soon poised to be un-patched in upcoming WebAssembly updates. Yup, nothing to worry about.
Good luck.

ty_ger07
but are soon poised to be un-patched in upcoming WebAssembly updates.

Sajin

ty_ger07
but are soon poised to be un-patched in upcoming WebAssembly updates.

Good thing we can disable browser updates.

candle_86
just use a text based browser opened from a dos computer, these things don't affect the 486

aka_STEVE_b
good news on the horizon - 
 
https://www.theregister.c...17/spectre_protectors/

Apvrille's work backs up what we've heard from other researchers: so far, Spectre exploitation is theoretical, with no exploits in the wild. She wrote that while there was a flurry of “Spectre exploit” stories based on AV-Test sample collection, it turned out that all of the reported samples were proofs-of-concept rather than genuine malware.