Disagree entirely. With an outdated CPU, you could be owned just by running Java... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

forward1 10 months ago | parent | context | favorite | on: LogoFAIL: Secure Boot bypass with manipulated boot...

Disagree entirely. With an outdated CPU, you could be owned just by running Javascript on the wrong site. Not so with a vulnerable UEFI/BIOS, that requires additional privesc as is seen here.

justaj 10 months ago [–]

Hmm, I see your point. Couldn't such CPU bugs be patched / mitigated in software (which would then incur some performance penalties) ?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact