Meltdown/Spectre - critical vulnerabilities

l33t4opera

l33t4opera

Hi guys, I thought it might be worth reading for all of us, so in case you are not aware of it, and didn't read it yet:
"There will be a scheduled release of Opera which will contain a first set of workarounds as soon as the browser is properly tested and ready for release. This will most likely be at the end of January. "

You will find more information in the article: Opera mitigates critical CPU vulnerabilities.

The links to other, related articles/info:
1. Meltdown and Spectre CPU Flaws Affect Intel, ARM, AMD Processors,
2. Mitigations landing for new class of timing attack,
3. Google says CPU patches cause ‘negligible impact on performance’ with new technique,
4. About speculative execution vulnerabilities in ARM-based and Intel CPUs.

toyo

toyo

http://xlab.tencent.com/special/spectre/spectre_check.html

Strict site isolation - Enabled

Opera 50.0.2762.58 (PGO) comes as Vulnerable. Edge is OK. IE is OK. OS fully patched and with the new BIOS too.

acidinmyfridge

acidinmyfridge

@toyo i have checked it with the link you provided http://xlab.tencent.com/special/spectre/spectre_check.html

Strict site isolation - Enabled

Opera 50.0.2762.58 (PGO)

and it comes out as not vulnerable. Have you tried disable/enable flag, restart browser and try in a new tab? That's what i did and ran the test three times in a row then, on all three = not vulnerable.

You think you know, but you have no idea.

burnout426

burnout426 Volunteer

@acidinmyfridge said in Security breach on Chromiums!:

Strict site isolation - Enabled

FWIW, I tried this setting in Chrome and it made Chrome unstable. I'm assuming the same in Opera.

acidinmyfridge

acidinmyfridge @burnout426

@burnout426 it does sadly. it has its drawbacks. on some website i wasn't able to play music in an implemented player for example. devs fixed it though, so it's working despite the flag being enabled,
Hope this Issue will be fixed soon.

You think you know, but you have no idea.