News for hackers. Stuff that matters.

A comment on Reading privileged memory with a side-channel. Parent comment

Re:Reading privileged memory with a side-channel by kodablah on Wednesday January 03, 2018 @06:06PM (#16066318)
From spectre.pdf:

> In addition to violating process isolation boundaries using native code, Spectre attacks can also be used to violate browser sandboxing, by mounting them via portable JavaScript code. We wrote a JavaScript program that successfully reads data from the address space of the browser process running it.

(granted I think site isolation, if enabled, mitigates crossing domain boundaries)

It goes on to show a sample JS impl that JITs into the expected insns using V8.

[ Parent | on HN ]
Re:Reading privileged memory with a side-channel by flukus on Wednesday January 03, 2018 @06:14PM (#16066390)
And we can't even read TFA with javascript disabled, you have to be less secure just to read the google security blog.

Edit - mixing it up with this other article (https://security.googleblog.com/2018/01/todays-cpu-vulnerabi...)

[ Parent | on HN ]
Re:Reading privileged memory with a side-channel by jwilk on Wednesday January 03, 2018 @06:30PM (#16066506)
I can read the article without JS just fine.
[ Parent | on HN ]