News for hackers. Stuff that matters.

A comment on Side channel that leaked data from Intel CPUs patched by silent Windows update. Parent comment

Re:Side channel that leaked data from Intel CPUs patched by ... by cjbprime on Wednesday August 07, 2019 @02:43PM (#20637604)
It's code being executed in a well-tested sandbox that should not be able to steal your machine's secrets, so it's appropriate to freak out over the fact that these attacks allowed it to do that.
[ Parent | on HN ]
Re:Side channel that leaked data from Intel CPUs patched by ... by inetknght on Thursday August 08, 2019 @10:38AM (#20644983)
It's code that can run for arbitrary amounts which can't be killed without killing the browser and affecting _other_ services to.

It's user hostile code executed by foreign entities on devices that you are supposed to "own"

[ Parent | on HN ]
Re:Side channel that leaked data from Intel CPUs patched by ... by cjbprime on Thursday August 08, 2019 @10:50PM (#20650962)
In recent browsers you can certainly kill just one tab's JavaScript without taking out anything else.

It doesn't feel very different to printing a PostScript file to me. You're giving someone access to run their "arbitrary code" in a VM on your system with very limited permissions.

[ Parent | on HN ]