Hacker News new | past | comments | ask | show | jobs | submit login

> these days browsers are handing over footholds to anyone with a webserver

It is bad for providers using non-dedicated cloud infrastructure too: some of these flaws allow breaking out of the hypervisor's protections so an attacker can in theory read from other VMs on the same infrastructure not just other processes on your (virtual)server.

> I've been using AMD CPUs exclusively on the desktop

That doesn't protect you all that much. While this particular flaw seems from current reports to be Intel specific, some of the past ones affected AMD and Arm designs also, and maybe there are some AMD/Arm/other specific attacks waiting to be found too.




> That doesn't protect you all that much. While this particular flaw seems from current reports to be Intel specific, some of the past ones affected AMD and Arm designs also, and maybe there are some AMD/Arm/other specific attacks waiting to be found too.

I think this is called "security through minority" which is a special case of "security through obscurity" :)


Decreasing the likelihood of being compromised is still one layer of security. It's only bad if you depend on it.


That was the case with the whole "MacOS doesn't have viruses" thing.


Dont forget about meltdown.


Only AMD has avoided Meltdown, both ARM in some CPUs, and IBM, both POWER and mainframe, have Meltdown bugs.


It does seem to be a(nother) good argument for a heteogenous CPU marketplace though.


>and maybe there are some AMD/Arm/other specific attacks waiting to be found too.

And maybe there is no such a flaw hiden in AMD, the certain thing is that if bad people start to use this in JS then all the people that have Intel CPUs like I have will have to do something about it , disable JS and suffer a lot of breakage or install some software patch that will decrease the performance even more on this machines.

It will be interesting how this will affect the decision for what hardware to buy for cloud computers, AMD and ARM could gain new customers.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: