-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi Alex,
The libreboot mailing list is down, so you can't CC it at the moment. I was notified about this thread. There's not much we can do from the Libreboot side, but there are mitigations on kernel side... since it's exploitable from javascript you could also e.g. not run JavaScript. specing on #libreboot IRC had the idea to run Firefox without the JIT enabled - we both tried to compile the latest ESR however, with --disable-ion, and it segfaulted. I tried to build ff 45esr instead, but that build failed. - -- Leah Rowe Libreboot developer and project founder. Use free software. Free as in freedom. https://www.gnu.org/philosophy/free-sw.html Use a free BIOS - https://libreboot.org/ Use a free operating system, GNU+Linux. Support computer user freedom https://fsf.org/ - https://gnu.org/ Minifree Ltd, trading as Ministry of Freedom | Registered in England, No. 9361826 | VAT No. GB202190462 Registered Office: 19 Hilton Road, Canvey Island, Essex SS8 9QA, UK | Web: https://minifree.org/ -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEE+JRrnG26iGmvPhSA/0W3TPnRz5QFAlpV1UgACgkQ/0W3TPnR z5T9qAf+PH4YUo39T5irNIbzyljufibnn0zHGtwKOYtxHtZvzPAsaht2/VK6D1UT MUjH2EI2UYQsYzUPoza9SJ86TTtvukpZ9eBVNUW+Ah3KHO/ljHPFco3I0FlkjsoC rSRC2y7Nb1e8jidSXJ6bAqZGYqlNjmMcPU+7ct41bIwARybAD8PDsTXHnSH8Iqkk 7SP+XE062VOG41faKt7CZurxvdxBkn6ZfgCOc6+6jrhJBbOB7MPGTUuhxMjY+mPo tSJ4jAC15kZ9mQHu5f2ewnOn0zMQhTWU+AaOOaqdfh1RfK4nlf6UQkASw1pJ7/01 ywauC8hFVD2qDxr3OXXFCKdgbw61jw== =QnYX -----END PGP SIGNATURE-----