Spectre - what to do
Posted: 21 Jan 2018, 15:02
Most distros have implemented a patch for Meltdown as a result of the Intel CPU flaw.
But Spectre remains and it can be used to read all your passwords with a simple Javascript on any Webpage.
This means that you definitely will need to "harden" your Browser against Spectre
This is how you do it on Chrome based browsers Like:
And enable Strict site isolation
Firefox will be patched with a regular update
FF version 57.04 is patched - you can check your FF version under "Help" and "About"
In the Brave browser you can enable site isolation in The regular settings under "security".
Microsoft's Edge and IE will be patched through regular Windows updates.
Apple's Safari will be patched through regular security updates.
After changing the settings; remember to close you browser and restart it (a few times couldn't hurt).
In addition you can put your Browser in a Firejail.
Firejail alone will keep your browser from leaking according to my tests. Most of my browsers were already in Firejail (edited in the menu) so I haven't been that vulnerable to Spectre to begin with
But Spectre remains and it can be used to read all your passwords with a simple Javascript on any Webpage.
This means that you definitely will need to "harden" your Browser against Spectre
This is how you do it on Chrome based browsers Like:
- Chrome
Chromium
Iridium (Occasionally fails test even if in Firejail with correct settings)
Opera
Vivaldi
Code: Select all
chrome://flags/#enable-site-per-process And enable Strict site isolation
Firefox will be patched with a regular update
FF version 57.04 is patched - you can check your FF version under "Help" and "About"
In the Brave browser you can enable site isolation in The regular settings under "security".
Microsoft's Edge and IE will be patched through regular Windows updates.
Apple's Safari will be patched through regular security updates.
After changing the settings; remember to close you browser and restart it (a few times couldn't hurt).
In addition you can put your Browser in a Firejail.
Firejail alone will keep your browser from leaking according to my tests. Most of my browsers were already in Firejail (edited in the menu) so I haven't been that vulnerable to Spectre to begin with
