Re:Mitigations landing for new class of timing attack
by mehrdadn on Thursday January 04, 2018 @03:11AM
(#16068731)
Shall we now have a new website permission for timers or at least high-precision timers? (It will be quite fun to get end-users to understand the ramifications of such a thing...)
[ Parent
| on HN ]
Re:Mitigations landing for new class of timing attack
by zastrowm on Thursday January 04, 2018 @11:23AM
(#16071543)
Has there ever been discussion about a permission for "running as an app" that would make a distinction between web pages and apps? I like that the web gets more features that allow apps to run cross-platform, but I don't fully understand why we make no distinction between pages and apps.
Re:Mitigations landing for new class of timing attack
by QasimK on Thursday January 04, 2018 @05:41AM
(#16069290)
I would strongly say no - while most users can immediately understand permissions to use the camera or microphone, understanding the permission for "high-precision timers" requires considerable unreasonable effort.