Leah Rowe <i...@gluglug.org.uk> writes: > Hi Alex, > > The libreboot mailing list is down, so you can't CC it at the moment. > I was notified about this thread. > > There's not much we can do from the Libreboot side, but there are > mitigations on kernel side... since it's exploitable from javascript > you could also e.g. not run JavaScript. specing on #libreboot IRC had > the idea to run Firefox without the JIT enabled - we both tried to > compile the latest ESR however, with --disable-ion, and it segfaulted. > I tried to build ff 45esr instead, but that build failed.
Thank you. I have updated my kernel. For the browser part, I currently run tor browser with security level set to high (so that javascript is disabled by default). Maybe you can tell people on #libreboot about this solution if you like.
