No. Packages would not need to be installed as root. Additionally, many possible... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		zbentley on Jan 7, 2018 \| parent \| context \| favorite \| on: Many packages suddenly disappeared No. Packages would not need to be installed as root. Additionally, many possible ways to use the exploit in GP could run as unprivileged users.

MagicWishMonkey on Jan 7, 2018 [–]

Wouldn't the package need to be executed as root, though? Or does spectre/meltdown not require privileged access?

Natanael_L on Jan 7, 2018 | [–]

No, that's the entire point. They need almost nothing at all but the ability to run code fast in a loop with memory calls. The entire point is that they bypass privilege checks.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact