Instal the new for ios Spectre1/1/2024 ![]() ![]() There are no known exploits impacting customers at this time. In a statement released on Thursday, Apple said that: Some of these changes shipped in the Jan 8 updates and more such changes are continuing to land in WebKit. WebKit’s response to Spectre is a two-tiered defence:ġ WebKit has disabled SharedArrayBuffer and reduced timer precision.Ģ WebKit is transitioning to using branchless security checking in addition to branch-based security checking. Writing on the official WebKit blog however, Filip Pizlo provides more details on the various issues and makes it clear that there are still more fixes to come. Similar patches have already been released for Chrome and Firefox.Īs is typical, Apple provides few details beyond making it clear which vulnerabilities are targeted, but the firm does thank the researchers responsible for finding the bugs, including Jann Horn of Google Project Zero, in the release notes. The three updates make changes to iOS, macOS and the Safari browser itself.Īs Chris Swan noted in his report for InfoQ over the weekend, browsers are a particular target for the Spectre vulnerability since they can potentially be exploited via JavaScript running in the browser. Today the firm has released a trio of security updates aimed at protecting Safari and WebKit against the Spectre attack. ![]() When the news broke last week of two side-channel attacks - Spectre and Meltdown - Apple stated that it had already released mitigations for Meltdown in iOS 11.2, macOS 10.13.2, and tvOS 11.2, and that fixes for Spectre would follow. ![]()
0 Comments
Leave a Reply.AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |