PC Tech Thread

From elsewhere:

"
Papers describing each attack:

https://meltdownattack.com/meltdown.pdf (this is the Intel specific one).

https://spectreattack.com/spectre.pdf (this is the Intel/AMD/ARM one)

From the spectre paper:

As a proof-of-concept, JavaScript code was written that, when run in the Google Chrome browser, allows JavaScript to read private memory from the process in which it runs (cf. Listing 2).
"

Think about that for a bit. Just by visiting a webpage with some dodgy JavaScript on it, it could suck out private information held in the browser (such as passwords and logins for other sites) and then exfiltrate them.