News for hackers. Stuff that matters.

A comment on Exploiting the Math.expm1 typing bug in V8. Parent comment

Re:Exploiting the Math.expm1 typing bug in V8 by userbinator on Thursday January 03, 2019 @02:15AM (#18813457)
...and probably a lot slower. Google loves to make claims about V8's performance, but not so much about security.
[ Parent | on HN ]
Re:Exploiting the Math.expm1 typing bug in V8 by tokyodude on Thursday January 03, 2019 @05:06AM (#18814062)
certainly V8 tries to be correct and this bug will be fixed. Chromium's position is "security in depth". They know it's impossible to have zero bugs therefore the entire architure assumes there will be bugs and tries to prevent them from causing any harm. This is also why there are roughly 10x less code execution bugs in chrome vs other browsers. same number of bugs overall but most lead nowhere
[ Parent | on HN ]
Re:Exploiting the Math.expm1 typing bug in V8 by blattimwind on Thursday January 03, 2019 @06:45AM (#18814427)
> Chromium's position is "security in depth".

Yet the exploit in WebSQL a few weeks ago gave RCE from a component directly reachable by page scripts.

[ Parent | on HN ]
Re:Exploiting the Math.expm1 typing bug in V8 by librarian42 on Saturday January 05, 2019 @09:36AM (#18831813)
Technically that was an SQL injection attack. :)
[ Parent | on HN ]
Re:Exploiting the Math.expm1 typing bug in V8 by tom_ on Thursday January 03, 2019 @09:29AM (#18815294)
That must have been one of the bugs that lead somewhere.
[ Parent | on HN ]