Conversation

Notices

1. D Dino (garbados@toot.cat)'s status on Wednesday, 03-Jan-2018 19:26:35 EST D Dino

   In case you thought browser sandboxing would protect you, here's an excerpt from the Spectre paper:

   > Attacks using JavaScript: In addition to violating process isolation boundaries using native code, Spectre attacks can also be used to violate browser sandboxing, by mounting them via portable JavaScript code. We wrote a JavaScript program that successfully reads data from the address space of the browser process running it.

   1. Tomas SA2TMS (tomas@social.umeahackerspace.se)'s status on Thursday, 04-Jan-2018 04:43:10 EST Tomas SA2TMS

      in reply to
      Oh boy, I have so many I-told-you-so:s to hand out