Hacker News Reader

>As always, AMD strongly encourages its customers to consistently undertake safe computing practices, examples of which include: not clicking on unrecognized hyperlinks, following strong password protocols, using secure networks, and accepting regular software updates.

Ummm none of these things will stop this attack.

View on HN

Except they just said this attack is virtually impossible (certainly hasn't been demonstrated) on AMD. So I interpret this as general advice.

There are 3 attacks, two of which AMD claims to be immune/virtually immune to, and one which they do admit to being applicable.

Is the JS PoC for Spectre not applicable to AMD then?

I think Spectre and the JS PoC are actually the ones applicable to any modern processors (including AMDs, ARMs and probably most other chip vendors). Looks like the mitigations for these will be directly included in the browser.

EDIT : I don't even think we know of a way to fix Spectre in the kernel...

https://lkml.org/lkml/2018/1/3/780

No, that's only for variant two. Spectre is also variant one.

These are all ways of preventing malicious code from running on your system. If you're not running code that abuses the new attack vectors, then you are effectively stopping the attack.

Reply on news.ycombinator.com