Apple's Safari browser is still vulnerable to Spectre attacks
news.rub.de
news.rub.de
On this page, under the 'mitigations;' sections it says:
> At the time of public release, Apple has implemented a mitigation for iLeakage in Safari. However, this mitigation is not enabled by default, and enabling it is possible only on macOS. Furthermore, it is marked as unstable.
This is the 'Swap Processes on Cross-Site Window'.
I've just checked and on Sonoma, this flag is marked as Stable - and is activated by default.
It is also turned on by default on iOS 17.1.
Obviously, I don't know when this arrived, but it seems to me that the mitigation has already been rolled out.
Disclaimer: It is possible that I previously enabled this feature flag on my Mac and Phone and I forgot, but I don't think so. It also activated in the Guest User Safari settings and that is recreated as a clean account each time.
% defaults write com.apple.Safari IncludeInternalDebugMenu 1
2023-10-30 16:25:46.182 defaults[71906:4790936] Could not write domain /Users/poppopret/Library/Containers/com.apple.Safari/Data/Library/Preferences/com.apple.Safari; exiting