Hacker News Reader

Run a browser in a VM with a hardened kernel?

Or can a properly designed attack break out of the VM and hardened kernel?

The original Spectre paper[0] describes an attack on KVM where software with guest ring 0 access can read host memory. I'm not sure if it's possible without guest ring 0 access.

https://spectreattack.com/spectre.pdf

Reply on news.ycombinator.com