Page 1 of 1

What Spectre and Meltdown Mean For WebKit

Posted: Wed Jan 10, 2018 4:25 am
by morganism
What Spectre and Meltdown Mean For WebKit

https://webkit.org/blog/8048/what-spect ... or-webkit/

"WebKit relies on branch instructions to enforce what untrusted JavaScript and WebAssembly code can do. Spectre means that an attacker can control branches, so branches alone are no longer adequate for enforcing security properties.

Meltdown means that userland code, such as JavaScript running in a web browser, can read kernel memory."

Re: What Spectre and Meltdown Mean For WebKit

Posted: Wed Jan 10, 2018 6:15 am
by therube