this post was submitted on 28 Jan 2025
285 points (97.3% liked)

Technology

73758 readers
4611 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago
MODERATORS
L3s@lemmy.world
enu@lemmy.world
technopagan@lemmy.world
L4s@lemmy.world
L3s@hackingne.ws
L4s@hackingne.ws
285
Apple chips can be hacked to leak secrets from Gmail, iCloud, and more (arstechnica.com)
submitted 6 months ago by return2ozma@lemmy.world to c/technology@lemmy.world
23 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] narc0tic_bird@lemm.ee 60 points 6 months ago (3 children)

Speculative execution seems to be the source of a lot of security flaws in many different CPUs. CPU manufacturers seem to be so focused on winning the performance race that security aware architecture design takes the backseat.

Also, it's more and more clear that it's a bad idea that websites can just execute arbitrary code. The JS APIs are way too powerful and complex nowadays. Maybe websites and apps should've stayed separate concepts instead of merging into "web apps".

I also wonder if it'd be possible to design a CPU so vulnerabilities like these are fixable instead of just "mitigable". Similar to how you can reprogram an FPGA. I have no clue how chip design works though, but please feel free to reply if you know more about this.

[–] grue@lemmy.world 10 points 6 months ago (1 children)

Also, it’s more and more clear that it’s a bad idea that websites can just execute arbitrary code. The JS APIs are way too powerful and complex nowadays.

Javascript in general was a mistake, and always has been.

The web should've had Scheme or Python instead. Or better yet, we shouldn't have given up so quickly on Java Web Start because then we could've had proper web applications with their own windows and native UIs and such.

Maybe websites and apps should’ve stayed separate concepts instead of merging into “web apps”.

Damn straight!

[–] OmegaLemmy@discuss.online 0 points 6 months ago

Oh no, not python!

[–] fmstrat@lemmy.nowsci.com 5 points 6 months ago

Fast for the benchmarks. "We'll make it slower and safer later."

[–] cellardoor@lemmy.world 3 points 6 months ago

Take a look at ARM Morello and CHERI.