[junek]

OK, fun. What can we do to mitigate this until it gets patched?

[omcnoe]

Serious answer, don't use Safari. Use a browser that properly separates webpages into isolated processes so that this kind of cross-site read is not possible.

[goldsteinq]

There’re no other browsers on iPhone. Every iPhone browser is a reskin of Safari. They’re in theory supposed to allow other browsers in the EU, but AFAIK it has not happened yet.

[amelius]

Will that work? Isn't memory treated in a unified way between processes, at some point?

[thijsr]

From the FAQ:

> While FLOP has an actionable mitigation, implementing it requires patches from software vendors and cannot be done by users. Apple has communicated to us that they plan to address these issues in an upcoming security update, hence it is important to enable automatic updates and ensure that your devices are running the latest operating system and applications.

[hmottestad]

I wonder if Lockdown Mode would help?

[dmitrygr]

IIRC, it disables jit and webassembly, so i think yes