top notch exploration, and the story was just the right amount.

lol

Is there really any other reaction?

Many sites have had to enable reveal passwords for people with complicated passwords not using password managers.

It’s low risk, but their numbers are also coming from fairly dated hardware and is just proof of concept. It can almost certainly be speed up significantly.

This one’s super sketch. It’s not even a study, it’s just an article and the particular claim they’re making comes from other research and is more about older contraceptives.

The problem is that so many browsers leverage hardware acceleration and offer access to the GPUs. So yes, the browsers could fix the issue, but the underlying cause is the way GPUs handle data that the attack is leveraging. Fixing it would likely involve not using hardware acceleration.

As these patterns are processed by the iGPU, their varying degrees of redundancy cause the lossless compression output to depend on the secret pixel. The data-dependent compression output directly translates to data-dependent DRAM traffic and data-dependent cache occupancy. Consequently, we show that, even under the most passive threat model—where an attacker can only observe coarse-grained redundancy information of a pattern using a coarse-grained timer in the browser and lacks the ability to adaptively select input—individual pixels can be leaked. Our proof-of-concept attack succeeds on a range of devices (including computers, phones) from a variety of hardware vendors with distinct GPU architectures (Intel, AMD, Apple, Nvidia). Surprisingly, our attack also succeeds on discrete GPUs, and we have preliminary results indicating the presence of software-transparent compression on those architectures as well.

It sounds distantly similar to some of the canvas issues where the acceleration creates different artifacts which makes it possible to identify GPUs and fingerprint the browsers.

I read that to mean it’s a digital download only and not a physical copy in stores, but didn’t put much thought into it.

Take this article with a grain of salt.

1. the site that hosts it is a garbage clickbait health site.
2. It links to an article in the NIH database, but it’s from last year and as the bright yellow box says, there are some concerns about the article. ( concern and the reply )
3. It has been corrected
4. They also note in the article “all oral contraceptive pills may cause mood changes, but the newer oral contraceptive pills containing estradiol or estradiol valerate may be less likely to cause mood changes.”