Re:Reading privileged memory with a side-channel
by baq on Wednesday January 03, 2018 @06:07PM
(#16066327)
the big if is whether javascript code that can exploit this can be written. (edit: that's a yes, from the pdf itself...) if yes, nobody's safe, as any webpage (any webpage, even that ad in an iframe) could in theory read your password if it's anywhere in RAM.
[ Parent
| on HN ]
Re:Reading privileged memory with a side-channel
by djsumdog on Thursday January 04, 2018 @01:17AM
(#16068427)
Firefox and Chrome have both started posting mitigation strategies. They're mentioned in other comments, some depending on making time functions less accurate since this is a timing attack.