New
#1
That's good news from Google - but presumably their patch only provides protection when browsing in Chrome and not against other Spectre attack vectors.
Google claims to have a Spectre fix that doesn BGRBut according to Google, it is still possible to have the best of both worlds. Google’s own fix for Variant 2 of the Spectre CPU attacks, considered to be the hardest to patch without impacting performance, uses software patches, rather than disabling the affected CPU features. According to Google, the patch has a “negligible” impact on performance, especially compared to the Microsoft and Intel patches, which have been confirmed to slow down some systems.
That's good news from Google - but presumably their patch only provides protection when browsing in Chrome and not against other Spectre attack vectors.
In the article they do say "In sharing our research publicly, we hope that this can be universally deployed to improve the cloud experience industry-wide.” So I assume it will be available as a fix to Microsoft and CPU makers.
Interesting article:
Keeping Spectre secret
How an industry-breaking bug stayed secret for seven months — and then leaked out
How the industry-breaking Spectre bug stayed secret for seven months - The Verge
Google: Our brilliant Spectre fix dodges performance hit, so you should all use it
Google wants the whole industry to adopt its Retpoline fixes for Variant 2 of the Meltdown-Spectre bugs.
Google: Our brilliant Spectre fix dodges performance hit, so you should all use it | ZDNet