Re: What do Meltdown and Spectre mean for libreboot x200 user?

[Alex Vong]

Leah Rowe <address@hidden> writes:

> Hi Alex,
>
> The libreboot mailing list is down, so you can't CC it at the moment.
> I was notified about this thread.
>
> There's not much we can do from the Libreboot side, but there are
> mitigations on kernel side... since it's exploitable from javascript
> you could also e.g. not run JavaScript. specing on #libreboot IRC had
> the idea to run Firefox without the JIT enabled - we both tried to
> compile the latest ESR however, with --disable-ion, and it segfaulted.
> I tried to build ff 45esr instead, but that build failed.

Thank you. I have updated my kernel. For the browser part, I currently
run tor browser with security level set to high (so that javascript is
disabled by default). Maybe you can tell people on #libreboot about this
solution if you like.