Thread

1. amluto · 1785980272 · focus · HN ↗

   In today’s “agentic” world, everyone seems to have forgotten approximately everything we used to know about security. And this new CPU is going all in on value speculation. Delightful.

   Maybe if “cyber” models get good enough at exploiting speculation attacks, people will start demanding equipment that is less prone to these attacks.

   1. archipelago123 · 1785980809 · focus · HN ↗

      Attacker: I can run any code on this machine? Time for speculation attacks!

      Attacker: Oh wait, I can run any code? I already own the machine...

      1. debugnik · 1785998348 · focus · HN ↗

         Not really, Spectre showcased an attack from within a JavaScript sandbox, which isn't considered to own the machine.

         Any side effects from speculation machinery can easily become a side-channel to infer values across security boundaries.

      2. samrus · 1786006835 · focus · HN ↗

         Did you forget about spectre and meltdown?

Unofficial Hacker News client; not affiliated with Y Combinator.