Hacker News Reader

A bit off topic but I asked the same issue in a thread that got delisted as [dupe] so I'm reposting here so hopefully someone can enlighten me:

I've been reading up a bit on these attacks and I was wondering if there are any particular requirements to implement them in an arbitrary language?

For example, can you implement the attack with Java but without JNI? i.e. are syscalls required to be able to leverage the exploit?

View on HN

the requirements are easy to meet - you just need to be able to time operations at a suitable precision. The exploits are possible in Javascript running in a browser.

Yeah, I saw the PoC in the Spectre paper, but I was wondering if a JVM language could meet those reqs.

I have absolutely no idea if using the JVM would for example, mess with the required precision since I'm guessing one would need to use JNI/JNA to get the timing and that could maybe not be suitable?

Java provides access to high resolution timers without JNI and optimises them very well.

Reply on news.ycombinator.com