Why Spectre demands more elegantly-coded software
Software & Web Development

Why Spectre demands more elegantly-coded software

For the foreseeable future, developers are going to have to get used to coding for slower hardware. Leaving aside the headline slowdowns seen by some systems with Meltdown patches applied, the longer-lasting problem is Spectre. As its prescient namers realized, this flaw will haunt the IT world for years to come.

Spectre is the gift that keeps on giving. To mitigate against it requires recompiling applications with new instructions that work around speculative execution vulnerabilities. But that's just putting a sticking plaster on a festering wound. Fundamentally we need new processor designs, ones that work differently, since what we have now just isn't secure. Unfortunately, new CPU designs aren't likely to appear any time soon.

For many development projects, the lack of total security may not matter too much. The risk of compromise is fairly low and not proven to be present in the wild, at least not yet. But mission-critical applications require a higher level of data security than “It's probably OK”.

Building software with low-code visual tools can save time, but won't magically fix underfunded development departments. Low-code: what it can do for your enterprise – and what it can't

There are some Spectre-immune systems but they tend to be slow or old or both. The Raspberry Pi is one and I'm writing this article on another, a pre-2013 Intel Atom box. It doesn't do Out-of-Order (OoO) execution, but/therefore it doesn't do anything particularly quickly. This is now the choice facing everyone who cares about security: fast and flawed or slow and safe (or at least safer).

To continue reading...


PREVIOUS ARTICLE

«Are thumbprints key for making digital currencies mainstream?

NEXT ARTICLE

News Roundup: Could the US have a nationalized 5G network?»
Alex Cruickshank

Alex Cruickshank has been writing about technology and business since 1994. He has lived in various far-flung places around the world and is now based in Berlin.  

Our Case Studies

IDG Connect delivers full creative solutions to meet all your demand generatlon needs. These cover the full scope of options, from customized content and lead delivery through to fully integrated campaigns.

images

Our Marketing Research

Our in-house analyst and editorial team create a range of insights for the global marketing community. These look at IT buying preferences, the latest soclal media trends and other zeitgeist topics.

images

Poll

Should the government regulate Artificial Intelligence?