Hacker News Reader

> ...there is such a thing as computer security...

> Of course there is. (...continues to talk about software security)

A bit over-optimistic when looking at hardware vulneraribilties like Spectre/Meltdown.

Secure software isn't worth much when it runs on vulnerable hardware (at least Spectre/Meltdown could be worked around in software though, but at a cost.

View on HN

There's "no such thing as computer security", because this one time computer security researchers found vulnerabilities?

You know that's their actual job right? That and fixing the problem. Which they did in both software and hardware.

One time? lscpu on my system lists two dozen CPU vulnerabilities known to the kernel. I stopped tracking them a long time ago when it felt like every week brought another information leak or bypass.

When I run that on my computer I see a big list of CPU vulnerabilities. All of them are either mitigated in software or fixed at the hardware level.

Looks to me like the security researchers have been doing their jobs.

Yes, except that they haven’t been able to fix this completely in sw and the community knows this.

Fix what?

Reply on news.ycombinator.com