[j-nsp] Meltdown and Spectre

[Benoit Plessis]

Le 08/01/2018 à 10:18, Gert Doering a écrit :
> Hi,
>
> On Mon, Jan 08, 2018 at 10:13:16AM +0100, Thilo Bangert wrote:
>>> Only if said person can execute *arbitrary* code.  Which you can't on my
>>> routers, no matter what sort of account I'm giving you.
>> You mean like
>>
>> $ start shell
> This is not arbirary code - no way to do the needed precision timers
> in shell.  And JunOS does not let you upload *binaries* (or compile
> JavaScript into machine code).

How so ?

I can SCP any binary i want on any JunOS platform i own (EX,SRX,QFX),
QFX 5100 let you run arbitrary VM !

Pretty sure an update or two would be most usefull ...

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 866 bytes
Desc: OpenPGP digital signature
URL: <https://puck.nether.net/pipermail/juniper-nsp/attachments/20180108/3c26faa1/attachment.sig>