Two possibly new mysterious, James Bond themed, attacks similar to Spectre and Meltdown emerge

Originally published at:

Only two weeks after the disclosure of the Spectre and Meltdown attacks, two new similar attacks against emerged on the internet. The attacks are called Skyfall and Solace and the discoverers of the attacks registered two websites. On these sites they explain the new attacks are based on Spectre and Meltdown and will be announced soon.

Somehow I get the feeling that we’re going to see all matter of CPU security bugs over the next few months. Until further notice, the best thing you can do to keep your devices secure is to be extra careful what you programs you execute. Security techniques like sand boxing can no longer be considered a particularly great option anymore.

That said, the biggest thing you all should probably be afraid of is a malicious JavaScript program. Said programs could eventually be embedded in any number of webpages. They will most likely come in the form of ads, since modern internet-based ads are almost always malware anyway. Consider using an ad blocker, or something like NoScript or LibreJS. The less code your machine executes, the more secure you’ll likely be.