Back in January, Google Project Zero (GPZ) disclosed Meltdown and Spectre security flaws. Variant 4 and Variant 3a are derivatives of these side channel methods still active today. Leading browser providers deployed mitigations for Variant 1 in their managed run times, substantially increasing the difficulty of exploiting side channels in web browsers. The same solution is applicable to Variant 4 and is available for consumers to use today.
... Chi tiết