#25229 closed defect (invalid)

Resist Spectre by using retpoline and a new instruction provided by Intel with microcode update

Reported by: cypherpunks Owned by:
Priority: High Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-security
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

you need to protect both browser and Tor.

Child Tickets

Change History (5)

comment:1 Changed 22 months ago by dgoulet

Resolution: invalid
Status: newclosed

Firefox has introduced defenses for this so it will get in Tor Browser at some point.

As for Tor, the OS kernel should be the main actor to mitigate those which by now updates have been rolled out on all major OS.

Unless there is a concrete way to implement a defense in tor itself, please open a ticket specifically pointing to that for which we can have action items.

comment:2 Changed 22 months ago by cypherpunks

Component: - Select a componentApplications/Tor Browser
Keywords: tbb-security added
Resolution: invalid
Status: closedreopened

comment:3 Changed 22 months ago by cypherpunks

Resolution: invalid
Status: reopenedclosed

FF52 isn't impacted, if there's something that needs to be implemented to better resist those nasty bugs then Mozilla will make a new FF52 ESR release.

comment:4 Changed 22 months ago by cypherpunks

Resolution: invalid
Status: closedreopened

"Go piss up a rope, little cypherpunk." (c)

comment:5 in reply to:  4 Changed 22 months ago by cypherpunks

Resolution: invalid
Status: reopenedclosed

tjr: Landed a 2ms bump in nightly and beta; uplifting to ESR 52.7

... so just wait for the (already mitigated) mitigation to pass a handshake to the next TB release.

Replying to cypherpunks:

"Go piss up a rope, little cypherpunk." (c)

Stop using nickm's licensed phrases without prior permission. ;)

Note: See TracTickets for help on using tickets.