News for hackers. Stuff that matters.
Re:A Spectre proof-of-concept for a Spectre-proof web by toomim on Friday March 12, 2021 @09:11PM (#26443271)
It means game over for users who run browsers like Safari, which don't isolate each site to their own OS process.

If you load Javascript from one site, that JS can read the entire state of memory for another site, if it is within the same OS process. This means that any site can include some nefarious javascript that reads all the cookies and passwords for the user on other sites, and then log in as them.

Re:A Spectre proof-of-concept for a Spectre-proof web by medlyyy on Friday March 12, 2021 @11:27PM (#26443962)
Seems like Firefox doesn't have this feature yet either?

https://wiki.mozilla.org/Project_Fission

Re:A Spectre proof-of-concept for a Spectre-proof web by ddworken on Friday March 12, 2021 @11:47PM (#26444035)
Yeah, Firefox doesn't have it yet but as I understand it, they're getting very close to shipping Project Fission.