this post was submitted on 28 Jan 2025
277 points (97.3% liked)
Technology
61203 readers
4603 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Wasn't it that those bugs were public knowledge by the time M1 was starting to sell? I guess recalls or delays to revenue are not acceptable.
Trophy for Apple being the first one to bring these speculative execution side channel attacks to Arm, because I've never heard of other cases. Ifi missed that please share enough details that I can find a white paper about it, because I don't read those kind of news from media.
Side channel attacks are as old as computing, and the specific CPU variants exploiting speculative execution have not simply occurred on 2018 hardware and stopped since; pretty much all CPU architecture is susceptible to some form of speculative execution exploit, Apple simply is not an exception to the rule, and I think it's unfair to call them out as somehow incompetent for making the same mistake as literally everyone
https://www.vusec.net/projects/ghostrace/
That you’ve never heard of it does not mean it doesn’t exist. You - or anyone else - just never heard of it.
Yep sure that's the definition of a 0 day vulnerability, it was always there and suddenly someone found out.
What I'm saying is that I have a special interest in this topic and never heard of this problem for Arm before, and if some has more awareness than me I'd like to hear more from trusted sources.