Re: What do Meltdown and Spectre mean for libreboot x200 user?

[Leah Rowe]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi Alex,

The libreboot mailing list is down, so you can't CC it at the moment.
I was notified about this thread.

There's not much we can do from the Libreboot side, but there are
mitigations on kernel side... since it's exploitable from javascript
you could also e.g. not run JavaScript. specing on #libreboot IRC had
the idea to run Firefox without the JIT enabled - we both tried to
compile the latest ESR however, with --disable-ion, and it segfaulted.
I tried to build ff 45esr instead, but that build failed.

- -- 
Leah Rowe

Libreboot developer and project founder.

Use free software. Free as in freedom.
https://www.gnu.org/philosophy/free-sw.html

Use a free BIOS - https://libreboot.org/
Use a free operating system, GNU+Linux.

Support computer user freedom
https://fsf.org/ - https://gnu.org/

Minifree Ltd, trading as Ministry of Freedom | Registered in England,
No. 9361826 | VAT No. GB202190462
Registered Office: 19 Hilton Road, Canvey Island, Essex SS8 9QA, UK |
Web: https://minifree.org/

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEE+JRrnG26iGmvPhSA/0W3TPnRz5QFAlpV1UgACgkQ/0W3TPnR
z5T9qAf+PH4YUo39T5irNIbzyljufibnn0zHGtwKOYtxHtZvzPAsaht2/VK6D1UT
MUjH2EI2UYQsYzUPoza9SJ86TTtvukpZ9eBVNUW+Ah3KHO/ljHPFco3I0FlkjsoC
rSRC2y7Nb1e8jidSXJ6bAqZGYqlNjmMcPU+7ct41bIwARybAD8PDsTXHnSH8Iqkk
7SP+XE062VOG41faKt7CZurxvdxBkn6ZfgCOc6+6jrhJBbOB7MPGTUuhxMjY+mPo
tSJ4jAC15kZ9mQHu5f2ewnOn0zMQhTWU+AaOOaqdfh1RfK4nlf6UQkASw1pJ7/01
ywauC8hFVD2qDxr3OXXFCKdgbw61jw==
=QnYX
-----END PGP SIGNATURE-----