Conversation

Notices

1. GeniusMusing (geniusmusing@nu.federati.net)'s status on Thursday, 05-Aug-2021 15:10:32 EDT GeniusMusing
   Microsoft announces new 'Super Duper Secure Mode' for Edge The Record by Recorded Future
   https://therecord.media/microsoft-announces-new-super-duper-secure-mode-for-edge/
   
   >Microsoft said today it plans to run an experiment in its Edge web browser where it will intentionally disable an important performance and optimization feature in order to enable more advanced security upgrades in what the company is calling Edge Super Duper Secure Mode.
   >
   >Announced today by Johnathan Norman, Microsoft Edge Vulnerability Research Lead, the idea behind the new Super Duper Secure Mode is to disable support for JIT (Just-In-Time) inside V8, the Edge browser’s JavaScript engine.
   >
   >JIT, while unknown to most end-users, plays a crucial role in all of today’s web browsers. JIT works by taking JavaScript and compiling it to machine code ahead of time. If the browser needs the code, it gains a significant speed boost. If it doesn’t, the code is discarded.
   >
   >However, JIT support in V8 is complex. Norman said JIT-related security issues amounted to 45% of all V8 vulnerabilities in 2019. Furthermore, more than half of the “in the wild” Chrome exploits rely on JIT-related bugs.
   >...
   
   HAHAHAHAHAHAHAHAHAhahahahahahahahahahahaha
   
   Super Duper Secure Mode
   
   HAHAHAHAHAHAHAHAHAhahahahahahahahahahahaha
   
   It's like they aren't even trying with the naming thing...
   1. GeniusMusing (geniusmusing@nu.federati.net)'s status on Thursday, 05-Aug-2021 15:41:04 EDT GeniusMusing

      in reply to
      Related source:
      Super Duper Secure Mode Microsoft Browser Vulnerability Research
      https://microsoftedge.github.io/edgevr/posts/Super-Duper-Secure-Mode/
   2. lnxw48a1 (lnxw48a1@nu.federati.net)'s status on Thursday, 05-Aug-2021 15:41:31 EDT lnxw48a1

      in reply to
      If they excise V8 completely, they'll drastically reduce security issues AND cut CPU & memory consumption by more than half.
      1. GeniusMusing (geniusmusing@nu.federati.net)'s status on Thursday, 05-Aug-2021 15:57:49 EDT GeniusMusing

         in reply to
         But... but... java!
         How will the internet survive without it?
         Maybe W3 will bring back <blink> :P