Meltdown and Spectre - Every computer/phone at risk

[enorbet]

Well, the problem is, javascript or flash code running in your browser is in this terminology a _local_ attack.

Remote attack is someone out there on the net sending some packets at you, or looking at your packets flying past him.

Yes that can be defined as a local attack since it requires one either activating the code or allowing that code to activate by default. The former is usually in the form of some clickbait but also includes opening pages, including email, of unknown sources. It is, after all, possible to embed code in things like jpeg files. The latter is only common among those who do not use addons like NoScript or setup Java and Flash to always ask before running. This is also one of many good reasons to always use bi-directional firewalls since so much of malware requires some "phone home" action. This, so far, isn't the case with Meltdown and Spectre, unless it is delivered as an attachment, whether open, disguised, or hidden, with a self-propagating element included. This will likely occur since being able to view otherwise hidden and privileged data is useless unless some means to view or exploit it are included.

What constitutes secure behavior is still much the same as always and hopefully common knowledge to everyone here on Physics Forums. If not, such information is easily found and implemented.

 

[nikkkom]

The latter is only common among those who do not use addons like NoScript or setup Java and Flash to always ask before running.

That's probably "only" 99.99% of all browser users.

 

[enorbet]

That's probably "only" 99.99% of all browser users.

While that may be regrettably so, anyone who knows anything about PC security considers such practice for anyone concerned about Meltdown and Spectre to be akin to worrying about their lack of motion sensor triggered lighting while leaving on vacation with their front and back doors not only unlocked but wide open. ;)