Hacker News Reader

In order to be vulnerable, a system needs to run malicious code. This is an especially big deal in the context of virtual machines in shared hosting, because you have no idea what code is running in other virtual machines on the same host. It also impacts end-user systems because the web is basically 100% untrusted code.

Even if the cpu in your router is vulnerable, what untrusted code is it expected to run?

None of this is to say it's not something that should be fixed. But it's low priority, as it requires the ability to execute code remotely already.

Ah, thanks. :)

I don't think those use x86 chips so they should be OK.

Everything is vulnerable to Spectre.

Not everything. In-order CPUs such as Cortex-A7 and Cortex-A53 are not affected. Confirmed by Arm at https://developer.arm.com/support/security-update "all other Arm cores are NOT affected"

Doesn’t Spectre just require speculative fetching? In which case in order is not sufficient as to guarantee immunity.

It’s Meltdown that relies on out of order execution.

https://meltdownattack.com/meltdown.pdf

https://spectreattack.com/spectre.pdf