Hacker News new | ask | show | jobs
by gmueckl 3084 days ago
These questions are only relevant if you're not controlling and trusting all the code you're running that system. For a consumer system this is true if (and basically only if) you're running a web browser on that system.

If you're confident in the software you're running on a non-shared hardware, both Meltdown and Spectre are non-issues requiring no mitigation. This is a narrow class of systems, but it exists.
2 comments
acdha 3084 days ago
> For a consumer system this is true if (and basically only if) you're running a web browser on that system.

… which is pretty close to universally true, especially when you consider how many people use apps which are based on something like Electron. If those apps load code or, especially, display ads there's JavaScript running in places people aren't used to thinking about.

link
sigstoat 3084 days ago
> If you're confident in the software you're running on a non-shared hardware...

and that you won't be hit by a remote execution vulnerability.

link
gmueckl 3084 days ago
That's what being confident in the software means.
link