News for hackers. Stuff that matters.
Re:Mitigations landing for new class of timing attack by mehrdadn on Thursday January 04, 2018 @03:11AM (#16068731)
Shall we now have a new website permission for timers or at least high-precision timers? (It will be quite fun to get end-users to understand the ramifications of such a thing...)
Re:Mitigations landing for new class of timing attack by zastrowm on Thursday January 04, 2018 @11:23AM (#16071543)
Has there ever been discussion about a permission for "running as an app" that would make a distinction between web pages and apps? I like that the web gets more features that allow apps to run cross-platform, but I don't fully understand why we make no distinction between pages and apps.
Re:Mitigations landing for new class of timing attack by QasimK on Thursday January 04, 2018 @05:41AM (#16069290)
I would strongly say no - while most users can immediately understand permissions to use the camera or microphone, understanding the permission for "high-precision timers" requires considerable unreasonable effort.