[tor-bugs] #25229 [- Select a component]: Resist Spectre by using retpoline and a new instruction provided by Intel with microcode update

Wed Feb 28 20:02:57 UTC 2018

#25229: Resist Spectre by using retpoline and a new instruction provided by Intel
with microcode update
----------------------------------+-------------------------
 Reporter:  cypherpunks           |          Owner:  (none)
     Type:  defect                |         Status:  closed
 Priority:  High                  |      Milestone:
Component:  - Select a component  |        Version:
 Severity:  Normal                |     Resolution:  invalid
 Keywords:                        |  Actual Points:
Parent ID:                        |         Points:
 Reviewer:                        |        Sponsor:
----------------------------------+-------------------------
Changes (by dgoulet):

 * status:  new => closed
 * resolution:   => invalid

Comment:

 Firefox has introduced defenses for this so it will get in Tor Browser at
 some point.

 As for Tor, the OS kernel should be the main actor to mitigate those which
 by now updates have been rolled out on all major OS.

 Unless there is a concrete way to implement a defense in tor itself,
 please open a ticket specifically pointing to that for which we can have
 action items.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25229#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online