Google Engineers Are Becoming Concerned Over Some Arm Platforms Lacking Spectre V2 Mitigations

[CochainComplex]

The fact that we need passwords and locks, tells you everything you need to know about human kind ...

wise words

The fact that we need passwords and locks, tells you everything you need to know about human kind ...

Not generally,.. Majority of people have got some moral standards in themselves. Only some individuals, maybe 1% or less, are that selfish, and focus on own gain on expense of others. However, these individuals can do lots of harm.

I saw many times parked car with open window, or some house with open garage without present owner, or keys left in the door from the outside, and never crossed my mind to take advantage of it,..

The worse part is, that morals are subjective. Ie. one can truly think, that he's rightful to do so,.. The other one is rich, and world belongs to everybody evenly,.. Regardless of how much one contributes back,... This is a twisted thinking of individual(s), but it's common. Even, some open-source movements are based on this view...

[Murple]

I thiught certain 64bit arm chips are immune to spec V2 eg a53. It would blow big chunks of crapola if there were performance penalties on hardware that didn't need it. And we wouldn't be able to disable it without recompiling userspace? Please tell me why I'm wrong

[Raka555]

Yep, let's also get rid of login passwords and door key locks while we are at it, and simply imprison everyone who enters someone else's account or home.

The fact that we need passwords and locks, tells you everything you need to know about human kind ...

[Etherman]

Let's stop having secrets on computers.

[CochainComplex]

Proper approach would still be disabling all mitigations on all platforms and imprisoning those who exploit the vulnerabilities. It's a crime after all, in most countries.

You don't stop selling knives because some people use them to kill. You don't lock cars to 10 km/h because some people cause accidents.

Im sorry but this is a rather naive approach. I would like this to be possible.

But you know that in the world there is not a real common legislation.

if someone is hijacking your phone in the US from outside lets say China...Pakistan or any other country which has no agreement on extradition...especially in such "minor" case. Do you really think that diplomats will waste the time on that even if they know who did it?
As long as there are no life at stake or millions in $$ the chance of success is rather low.

You can't stab an US citizen on USA property if you are in china (don't start creative ways to make it possible). But if you commit this crime in the US - you will be easily arrested and treated according to the local legislation.

Concerning the phone example - how do you prepare the lawsuite ..US law? Chinese Law? or maybe Cayman Islands Law ..is this somehow tied to British law ...still EU law or special zone? because the hijacker was using a botnetwork there? I'm sure it will be very difficult to find a reasonable priced lawyer who is even capable to process this kind of inquiry. Lets say you found one....Will China give the Network traffic data of the hijackers to foreigners ...I highly doubt it. How about the Caymans? I doubt it. So you have to file the case locally and try to prove that they have some botnetwork running. Try to do this from outside.

If this would be that easy I'm sure we would have less millionaires/companies hiding their money and that is far more attractive to US authorities because they could gain billions instead of "just being fair-minded" and doing it for the sake of justice.

edit: besides some tactical knives or knives with the intention used against humans are forbidden. Same with not safe cars (at least here in germany)

[Larry$ilverstein]

Proper approach would still be disabling all mitigations on all platforms and imprisoning those who exploit the vulnerabilities. It's a crime after all, in most countries.

You don't stop selling knives because some people use them to kill. You don't lock cars to 10 km/h because some people cause accidents.

Are you 12?

[Hibbelharry]

Proper approach would still be disabling all mitigations on all platforms and imprisoning those who exploit the vulnerabilities. It's a crime after all, in most countries.

You don't stop selling knives because some people use them to kill. You don't lock cars to 10 km/h because some people cause accidents.

Yeah, but practically there is no way to achieve that, so you need to do it the other way.

You don't restrict access to war/militar-grade weapons in USA because of mass/school shooting 😅

In my opinion the United States act really stupid on that matter.

[andrei_me]

You don't stop selling knives because some people use them to kill. You don't lock cars to 10 km/h because some people cause accidents.

You don't restrict access to war/militar-grade weapons in USA because of mass/school shooting
😅

[ddriver]

Proper approach would still be disabling all mitigations on all platforms and imprisoning those who exploit the vulnerabilities. It's a crime after all, in most countries.

You don't stop selling knives because some people use them to kill. You don't lock cars to 10 km/h because some people cause accidents.

Yep, let's also get rid of login passwords and door key locks while we are at it, and simply imprison everyone who enters someone else's account or home.