<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Meltdown &amp; Spectre the last Opera 68.0.3618.104 vulnerability]]></title><description><![CDATA[<p dir="auto">if checked it shows that it is vulnerable Meltdown &amp; Spectre. all default settings.<br />
<a href="https://xlab.tencent.com/special/spectre/spectre_check.html" target="_blank" rel="noopener noreferrer nofollow ugc">https://xlab.tencent.com/special/spectre/spectre_check.html</a><br />
the previous version worked well and there were no problems.<br />
<img src="/assets/uploads/files/1589552319224-bugopera.png" alt="bugopera.PNG" class=" img-responsive img-markdown" /></p>
]]></description><link>https://forums.opera.com/topic/40716/meltdown-spectre-the-last-opera-68-0-3618-104-vulnerability</link><generator>RSS for Node</generator><lastBuildDate>Wed, 17 Jun 2026 04:41:26 GMT</lastBuildDate><atom:link href="https://forums.opera.com/topic/40716.rss" rel="self" type="application/rss+xml"/><pubDate>Fri, 15 May 2020 14:20:23 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to Meltdown &amp; Spectre the last Opera 68.0.3618.104 vulnerability on Thu, 21 May 2020 06:27:14 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="https://forums.opera.com/uid/369">@donq</a> I think this Chinese test is old and may not take into account the current changes in the Chromium engine. Now it makes no sense to turn off flags and use keys only to pass this test. I also have not heard about the real use of this vulnerability in browsers, only in <a href="https://alephsecurity.com/2018/06/26/spectre-browser-query-cache/" target="_blank" rel="noopener noreferrer nofollow ugc">special tests</a>.</p>
]]></description><link>https://forums.opera.com/post/211725</link><guid isPermaLink="true">https://forums.opera.com/post/211725</guid><dc:creator><![CDATA[[[global:former_user]]]]></dc:creator><pubDate>Thu, 21 May 2020 06:27:14 GMT</pubDate></item><item><title><![CDATA[Reply to Meltdown &amp; Spectre the last Opera 68.0.3618.104 vulnerability on Tue, 19 May 2020 19:45:38 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="https://forums.opera.com/uid/189221">@anastasia-mx</a> said in <a href="/post/211456">Meltdown &amp; Spectre the last Opera 68.0.3618.104 vulnerability</a>:</p>
<blockquote>
<p dir="auto">can you explain what these parameters are</p>
</blockquote>
<p dir="auto">Read here: <a href="https://developers.google.com/web/updates/2018/10/wasm-threads" target="_blank" rel="noopener noreferrer nofollow ugc">https://developers.google.com/web/updates/2018/10/wasm-threads</a></p>
<blockquote>
<p dir="auto">and why they were enabled if this leads to a vulnerability?</p>
</blockquote>
<p dir="auto">Most likely unintended coincidence - performance <em>versus</em> security, as it often is.<br />
If Chrome is not affected, then you should report a bug to Opera. If Chrome (Chromium) is affected too, then better report to Chrome (Chromium).</p>
<p dir="auto">Well, before reporting check latest developer build - it is possible that this problem is already fixed. In my just updated dev version (70.0.3693.0) two checks (2 of 2) did report "not vulnerable" <img src="https://forums.opera.com/assets/plugins/nodebb-plugin-emoji/emoji/emoji-one/1f642.png?v=89iooh84962" class="not-responsive emoji emoji-emoji-one emoji--slightly_smiling_face" title=":)" alt="🙂" /></p>
]]></description><link>https://forums.opera.com/post/211524</link><guid isPermaLink="true">https://forums.opera.com/post/211524</guid><dc:creator><![CDATA[donq]]></dc:creator><pubDate>Tue, 19 May 2020 19:45:38 GMT</pubDate></item><item><title><![CDATA[Reply to Meltdown &amp; Spectre the last Opera 68.0.3618.104 vulnerability on Tue, 19 May 2020 14:52:26 GMT]]></title><description><![CDATA[<p dir="auto">@johnd78 I used the "<strong>WebAssembly threads support</strong>" = "<strong>disabled</strong>" flag and started the program opera with the key <strong>--disable-features=SharedArrayBuffer</strong> as a result, the problem is <em><strong>resolved</strong></em> and the browser is no longer vulnerable.<br />
can you explain what these parameters are and why they were enabled if this leads to a vulnerability?<br />
<img src="/assets/uploads/files/1589899883111-vuln.png" alt="vuln.png" class=" img-responsive img-markdown" /></p>
]]></description><link>https://forums.opera.com/post/211456</link><guid isPermaLink="true">https://forums.opera.com/post/211456</guid><dc:creator><![CDATA[anastasia-mx]]></dc:creator><pubDate>Tue, 19 May 2020 14:52:26 GMT</pubDate></item><item><title><![CDATA[Reply to Meltdown &amp; Spectre the last Opera 68.0.3618.104 vulnerability on Mon, 18 May 2020 01:56:50 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="https://forums.opera.com/uid/189998">@andrew84</a> Sorry, my mistake, I forgot something. Try to disable the flag <code>opera://flags/#enable-webassembly-threads</code> and start the browser with the key <code>--disable-features=SharedArrayBuffer</code>. Then it should work. Checked in the 68th and 69th Opera.</p>
]]></description><link>https://forums.opera.com/post/211217</link><guid isPermaLink="true">https://forums.opera.com/post/211217</guid><dc:creator><![CDATA[[[global:former_user]]]]></dc:creator><pubDate>Mon, 18 May 2020 01:56:50 GMT</pubDate></item><item><title><![CDATA[Reply to Meltdown &amp; Spectre the last Opera 68.0.3618.104 vulnerability on Sun, 17 May 2020 19:26:20 GMT]]></title><description><![CDATA[<p dir="auto">@johnd78 I have that flag enabled (by default) here and the test says that Opera i snot vulnerable.</p>
]]></description><link>https://forums.opera.com/post/211159</link><guid isPermaLink="true">https://forums.opera.com/post/211159</guid><dc:creator><![CDATA[leocg]]></dc:creator><pubDate>Sun, 17 May 2020 19:26:20 GMT</pubDate></item><item><title><![CDATA[Reply to Meltdown &amp; Spectre the last Opera 68.0.3618.104 vulnerability on Sun, 17 May 2020 19:23:01 GMT]]></title><description><![CDATA[<p dir="auto">@johnd78 That flag used to make sense three years ago, when the post was published.</p>
]]></description><link>https://forums.opera.com/post/211158</link><guid isPermaLink="true">https://forums.opera.com/post/211158</guid><dc:creator><![CDATA[leocg]]></dc:creator><pubDate>Sun, 17 May 2020 19:23:01 GMT</pubDate></item><item><title><![CDATA[Reply to Meltdown &amp; Spectre the last Opera 68.0.3618.104 vulnerability on Sun, 17 May 2020 19:22:39 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="https://forums.opera.com/uid/189998">@andrew84</a> said in <a href="/post/211150">Meltdown &amp; Spectre the last Opera 68.0.3618.104 vulnerability</a>:</p>
<blockquote>
<p dir="auto">Maybe the test itself is not stable. And my processors can't be called as 'modern' like it is said in the blog post's explanation.</p>
</blockquote>
<p dir="auto">The vulnerability itself is not 'stable' <img src="https://forums.opera.com/assets/plugins/nodebb-plugin-emoji/emoji/emoji-one/1f642.png?v=89iooh84962" class="not-responsive emoji emoji-emoji-one emoji--slightly_smiling_face" title=":)" alt="🙂" /><br />
Code in test script is a bit over my understanding, but it could be unstable either.</p>
<p dir="auto"><em>To read protected memory areas CPU cache is cleared, code is tricked to execute speculative read from protected area (which is discarded and thus not giving error - but data is already loaded into cache) and then some other memory addresses are read - read timing depends on cache containig specific data. Some information can be leaked even using somewhat random timing - I think this is exactly what you experience.</em></p>
]]></description><link>https://forums.opera.com/post/211157</link><guid isPermaLink="true">https://forums.opera.com/post/211157</guid><dc:creator><![CDATA[donq]]></dc:creator><pubDate>Sun, 17 May 2020 19:22:39 GMT</pubDate></item><item><title><![CDATA[Reply to Meltdown &amp; Spectre the last Opera 68.0.3618.104 vulnerability on Sun, 17 May 2020 17:53:28 GMT]]></title><description><![CDATA[<p dir="auto">@johnd78 I can't comment here, I also tried it in 69 (which is not portable) and all is the same.<br />
<img src="/assets/uploads/files/1589737429464-2020-05-17_203748.png" alt="2020-05-17_203748.png" class=" img-responsive img-markdown" />.</p>
<p dir="auto">Maybe the test itself is not stable. And my processors can't be called as 'modern' like it is said in the blog post's explanation.</p>
]]></description><link>https://forums.opera.com/post/211150</link><guid isPermaLink="true">https://forums.opera.com/post/211150</guid><dc:creator><![CDATA[andrew84]]></dc:creator><pubDate>Sun, 17 May 2020 17:53:28 GMT</pubDate></item><item><title><![CDATA[Reply to Meltdown &amp; Spectre the last Opera 68.0.3618.104 vulnerability on Sun, 17 May 2020 17:23:53 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="https://forums.opera.com/uid/189998">@andrew84</a> For me with the <code>opera://flags/#enable-webassembly-threads</code> flag Disabled in the 68th it turns out like with the <code>opera://flags/#shared-array-buffer</code> flag Disabled in the 58th.</p>
<p dir="auto"><img src="/assets/uploads/files/1589736217933-opera-%D1%81%D0%BD%D0%B8%D0%BC%D0%BE%D0%BA_2020-05-17_222159_xlab.tencent.com.png" alt="Opera Снимок_2020-05-17_222159_xlab.tencent.com.png" class=" img-responsive img-markdown" /></p>
]]></description><link>https://forums.opera.com/post/211148</link><guid isPermaLink="true">https://forums.opera.com/post/211148</guid><dc:creator><![CDATA[[[global:former_user]]]]></dc:creator><pubDate>Sun, 17 May 2020 17:23:53 GMT</pubDate></item><item><title><![CDATA[Reply to Meltdown &amp; Spectre the last Opera 68.0.3618.104 vulnerability on Sun, 17 May 2020 17:15:36 GMT]]></title><description><![CDATA[<p dir="auto">@johnd78 said in <a href="/post/211145">Meltdown &amp; Spectre the last Opera 68.0.3618.104 vulnerability</a>:</p>
<blockquote>
<p dir="auto">opera://flags/#enable-webassembly-threads</p>
</blockquote>
<p dir="auto">I disabled it, but in my case the result is still random (Portable 68.0.3618.104)<br />
<img src="/assets/uploads/files/1589735635565-2020-05-17_201047.png" alt="2020-05-17_201047.png" class=" img-responsive img-markdown" /></p>
]]></description><link>https://forums.opera.com/post/211146</link><guid isPermaLink="true">https://forums.opera.com/post/211146</guid><dc:creator><![CDATA[andrew84]]></dc:creator><pubDate>Sun, 17 May 2020 17:15:36 GMT</pubDate></item><item><title><![CDATA[Reply to Meltdown &amp; Spectre the last Opera 68.0.3618.104 vulnerability on Sun, 17 May 2020 17:04:23 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="https://forums.opera.com/uid/189998">@andrew84</a> Ok, got it. Then try to disable the flag <code>opera://flags/#enable-webassembly-threads</code> in the 68th Opera. To pass the test, this should be enough.</p>
]]></description><link>https://forums.opera.com/post/211145</link><guid isPermaLink="true">https://forums.opera.com/post/211145</guid><dc:creator><![CDATA[[[global:former_user]]]]></dc:creator><pubDate>Sun, 17 May 2020 17:04:23 GMT</pubDate></item><item><title><![CDATA[Reply to Meltdown &amp; Spectre the last Opera 68.0.3618.104 vulnerability on Sun, 17 May 2020 16:53:08 GMT]]></title><description><![CDATA[<p dir="auto">@johnd78 with the enabled flag I have the same random result in O58 too, depending oh how many 'caches' were processed.<br />
<img src="/assets/uploads/files/1589734344632-2020-05-17_194803.png" alt="2020-05-17_194803.png" class=" img-responsive img-markdown" /></p>
]]></description><link>https://forums.opera.com/post/211142</link><guid isPermaLink="true">https://forums.opera.com/post/211142</guid><dc:creator><![CDATA[andrew84]]></dc:creator><pubDate>Sun, 17 May 2020 16:53:08 GMT</pubDate></item><item><title><![CDATA[Reply to Meltdown &amp; Spectre the last Opera 68.0.3618.104 vulnerability on Sun, 17 May 2020 16:49:41 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="https://forums.opera.com/uid/189998">@andrew84</a> Please, try enabling the flag <code>opera://flags/#shared-array-buffer</code> in the 58th Opera. It is interesting to look at the test result on your system.</p>
]]></description><link>https://forums.opera.com/post/211141</link><guid isPermaLink="true">https://forums.opera.com/post/211141</guid><dc:creator><![CDATA[[[global:former_user]]]]></dc:creator><pubDate>Sun, 17 May 2020 16:49:41 GMT</pubDate></item><item><title><![CDATA[Reply to Meltdown &amp; Spectre the last Opera 68.0.3618.104 vulnerability on Sun, 17 May 2020 16:01:02 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="https://forums.opera.com/uid/73">@leocg</a> I meant the developers' blog comments on this issue. As far as I remember, when a problem with this vulnerability appeared, the developers forcedly disabled <code>opera://flags/#shared-array-buffer</code> flag. Now this flag is gone.</p>
]]></description><link>https://forums.opera.com/post/211136</link><guid isPermaLink="true">https://forums.opera.com/post/211136</guid><dc:creator><![CDATA[[[global:former_user]]]]></dc:creator><pubDate>Sun, 17 May 2020 16:01:02 GMT</pubDate></item><item><title><![CDATA[Reply to Meltdown &amp; Spectre the last Opera 68.0.3618.104 vulnerability on Sun, 17 May 2020 15:35:52 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="https://forums.opera.com/uid/73">@leocg</a> so read the blog post, there's an explanation. And there's 0 comments (because all the 'disqus' comments were removed)</p>
]]></description><link>https://forums.opera.com/post/211132</link><guid isPermaLink="true">https://forums.opera.com/post/211132</guid><dc:creator><![CDATA[andrew84]]></dc:creator><pubDate>Sun, 17 May 2020 15:35:52 GMT</pubDate></item><item><title><![CDATA[Reply to Meltdown &amp; Spectre the last Opera 68.0.3618.104 vulnerability on Sun, 17 May 2020 15:21:02 GMT]]></title><description><![CDATA[<p dir="auto">@johnd78 You posted the link to the blog post and not to the comment.</p>
]]></description><link>https://forums.opera.com/post/211129</link><guid isPermaLink="true">https://forums.opera.com/post/211129</guid><dc:creator><![CDATA[leocg]]></dc:creator><pubDate>Sun, 17 May 2020 15:21:02 GMT</pubDate></item><item><title><![CDATA[Reply to Meltdown &amp; Spectre the last Opera 68.0.3618.104 vulnerability on Sun, 17 May 2020 11:32:56 GMT]]></title><description><![CDATA[<p dir="auto">I found a blog comment from the Opera developers. <a href="https://blogs.opera.com/desktop/2018/01/opera-50-0-2762-67-stable-update/" target="_blank" rel="noopener noreferrer nofollow ugc">https://blogs.opera.com/desktop/2018/01/opera-50-0-2762-67-stable-update/</a></p>
]]></description><link>https://forums.opera.com/post/211103</link><guid isPermaLink="true">https://forums.opera.com/post/211103</guid><dc:creator><![CDATA[[[global:former_user]]]]></dc:creator><pubDate>Sun, 17 May 2020 11:32:56 GMT</pubDate></item><item><title><![CDATA[Reply to Meltdown &amp; Spectre the last Opera 68.0.3618.104 vulnerability on Sat, 16 May 2020 13:28:23 GMT]]></title><description><![CDATA[<p dir="auto">IIRC at least some (theoretical) browser attacks were based on precision timing in javascript and mitigation was done by randomizing JS timing errors - all such behavior is seated deep inside JS engine and should not be related to broken profile. Well, there likely are some JS flags, which may alter engine behavior - and you may search or ask on chrome/chromium forums, have they changed anything related to spectre or JS timings.</p>
<p dir="auto">I have not heard about (widespread) real-word exploits, based on spectre (or meltdown). I would think such kind of vulnerabilites can be used for targeted attaks, where every bit of information can be valuable; for generic attakcs (to take PC over) this is a bit hard and unpredictable to use - of course I may be wrong here.</p>
]]></description><link>https://forums.opera.com/post/210944</link><guid isPermaLink="true">https://forums.opera.com/post/210944</guid><dc:creator><![CDATA[donq]]></dc:creator><pubDate>Sat, 16 May 2020 13:28:23 GMT</pubDate></item><item><title><![CDATA[Reply to Meltdown &amp; Spectre the last Opera 68.0.3618.104 vulnerability on Fri, 15 May 2020 18:48:29 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="https://forums.opera.com/uid/189221">@anastasia-mx</a> A clean profile would help checking if the problem is not being caused by a broken profile.</p>
]]></description><link>https://forums.opera.com/post/210854</link><guid isPermaLink="true">https://forums.opera.com/post/210854</guid><dc:creator><![CDATA[leocg]]></dc:creator><pubDate>Fri, 15 May 2020 18:48:29 GMT</pubDate></item><item><title><![CDATA[Reply to Meltdown &amp; Spectre the last Opera 68.0.3618.104 vulnerability on Fri, 15 May 2020 18:44:28 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="https://forums.opera.com/uid/189221">@anastasia-mx</a> Since Opera is a Chromium based browser, you need to also check with other Chromium based browsers to have a valid comparasion.</p>
]]></description><link>https://forums.opera.com/post/210853</link><guid isPermaLink="true">https://forums.opera.com/post/210853</guid><dc:creator><![CDATA[leocg]]></dc:creator><pubDate>Fri, 15 May 2020 18:44:28 GMT</pubDate></item><item><title><![CDATA[Reply to Meltdown &amp; Spectre the last Opera 68.0.3618.104 vulnerability on Fri, 15 May 2020 18:13:14 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="https://forums.opera.com/uid/73">@leocg</a> said in <a href="/post/210828">&amp; Spectre the last Opera 68.0.3618.104 vulnerability</a>:</p>
<blockquote>
<p dir="auto">Did you check with a clean profile?</p>
</blockquote>
<p dir="auto">if you delete all the settings, it will be very bad and I will need to configure a lot from the beginning</p>
<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="https://forums.opera.com/uid/369">@donq</a> said in <a href="/post/210838">&amp; Spectre the last Opera 68.0.3618.104 vulnerability</a>:</p>
<blockquote>
<p dir="auto">What offline scanner says? <a href="https://www.grc.com/inspectre.htm" target="_blank" rel="noopener noreferrer nofollow ugc">https://www.grc.com/inspectre.htm</a></p>
</blockquote>
<p dir="auto">Meltdown &amp; Spectre - NO!, NO!  updates strongly slow down the system, I do not want to put them, I have hope for the browser itself.</p>
<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="https://forums.opera.com/uid/73">@leocg</a> said in <a href="/post/210846">&amp; Spectre the last Opera 68.0.3618.104 vulnerability</a>:</p>
<blockquote>
<p dir="auto">What about other Chromium based browsers?</p>
</blockquote>
<p dir="auto">not used by others Chromium based browsers. I only use Mozilla - everything is fine in it, there is no vulnerability.</p>
<p dir="auto">any other sites to check for vulnerabilities?</p>
]]></description><link>https://forums.opera.com/post/210850</link><guid isPermaLink="true">https://forums.opera.com/post/210850</guid><dc:creator><![CDATA[anastasia-mx]]></dc:creator><pubDate>Fri, 15 May 2020 18:13:14 GMT</pubDate></item><item><title><![CDATA[Reply to Meltdown &amp; Spectre the last Opera 68.0.3618.104 vulnerability on Fri, 15 May 2020 17:51:41 GMT]]></title><description><![CDATA[<p dir="auto">I have the same in latest MS Edge build (Canary), if 128 cache was scanned, then all is fine.<br />
<img src="/assets/uploads/files/1589565069581-2020-05-15_204745.png" alt="2020-05-15_204745.png" class=" img-responsive img-markdown" /></p>
]]></description><link>https://forums.opera.com/post/210847</link><guid isPermaLink="true">https://forums.opera.com/post/210847</guid><dc:creator><![CDATA[andrew84]]></dc:creator><pubDate>Fri, 15 May 2020 17:51:41 GMT</pubDate></item><item><title><![CDATA[Reply to Meltdown &amp; Spectre the last Opera 68.0.3618.104 vulnerability on Fri, 15 May 2020 17:43:29 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="https://forums.opera.com/uid/189221">@anastasia-mx</a> What about other Chromium based browsers?</p>
]]></description><link>https://forums.opera.com/post/210846</link><guid isPermaLink="true">https://forums.opera.com/post/210846</guid><dc:creator><![CDATA[leocg]]></dc:creator><pubDate>Fri, 15 May 2020 17:43:29 GMT</pubDate></item><item><title><![CDATA[Reply to Meltdown &amp; Spectre the last Opera 68.0.3618.104 vulnerability on Fri, 15 May 2020 17:29:24 GMT]]></title><description><![CDATA[<p dir="auto">O58 - 58.0.3135.132 (I don't see 'processing cache' for some reason)<br />
<img src="/assets/uploads/files/1589562871469-2020-05-15_200416.png" alt="2020-05-15_200416.png" class=" img-responsive img-markdown" /></p>
<p dir="auto">68.0.3618.104<br />
random result (when I click 'recheck'), sometimes it checks only few caches  (8, 16, 32), sometimes checks all caches until 128. When it includes all caches including 128 it shows NOT vulnerable. if less caches were checked, then it shows vulnerable. Win 8.1  3rd gen core i3.<br />
<img src="/assets/uploads/files/1589563241605-2020-05-15_201202.png" alt="2020-05-15_201202.png" class=" img-responsive img-markdown" /><br />
<img src="/assets/uploads/files/1589563254825-2020-05-15_201223.png" alt="2020-05-15_201223.png" class=" img-responsive img-markdown" /></p>
]]></description><link>https://forums.opera.com/post/210843</link><guid isPermaLink="true">https://forums.opera.com/post/210843</guid><dc:creator><![CDATA[andrew84]]></dc:creator><pubDate>Fri, 15 May 2020 17:29:24 GMT</pubDate></item></channel></rss>