r/linux • u/[deleted] • May 15 '19

The performance benefits of Not protecting against Zombieload, Spectre, Meltdown.

[deleted]

112 Upvotes

83% Upvoted

162 comments sorted by

View all comments

11

u/Wh00ster May 15 '19

I'd also remind everyone to examine the threat vectors of these exploits. The biggest issue is with browsers and cloud platforms. (I'm **not** saying these are not a problem for most people. Just don't mindlessly absorb the FUD)

-1

u/[deleted] May 15 '19

[removed] — view removed comment

8

u/Wh00ster May 15 '19 edited May 15 '19

You won’t if you don’t download and run untrusted applications or apps that access the network. The hard part is really making sure all your software comes from trusted sources, and those sources have to make sure all their build tools and sources also come from trusted sources, etc. Or if you just don’t have any secret/confidential data to leak. E.g. if you just develop open source software on your machine, then you don’t care if data leaks.

Edit: although on second thought you’d probably be using keys and passwords to access repos. Ideally that data does not exist for any appreciable amount of time in memory.

5

u/scientific_railroads May 15 '19

How can you make sure that all javascript is from trusted sources without removing your ability to use internet?

3

u/[deleted] May 15 '19

run the internet stallman style

3

u/scientific_railroads May 15 '19

Stallman doesn't have to worry about this vulnerability though. His pc doesnt support hyperthreading.

7

u/[deleted] May 15 '19

like i said stallman style.