News for hackers. Stuff that matters.

A comment on Side channel that leaked data from Intel CPUs patched by silent Windows update. Parent comment

Re:Side channel that leaked data from Intel CPUs patched by ... by inetknght on Thursday August 08, 2019 @10:38AM (#20644983)
It's code that can run for arbitrary amounts which can't be killed without killing the browser and affecting _other_ services to.

It's user hostile code executed by foreign entities on devices that you are supposed to "own"

[ Parent | on HN ]
Re:Side channel that leaked data from Intel CPUs patched by ... by cjbprime on Thursday August 08, 2019 @10:50PM (#20650962)
In recent browsers you can certainly kill just one tab's JavaScript without taking out anything else.

It doesn't feel very different to printing a PostScript file to me. You're giving someone access to run their "arbitrary code" in a VM on your system with very limited permissions.

[ Parent | on HN ]