Re:Microsoft Edge Experimenting with a Super Duper Secure Mode
by tinus_hn on Thursday August 05, 2021 @01:06AM
(#28070071)
Interesting but I am not a fan of how they don’t mention disabling features like WebAssembly in the short description.
[ Parent
| on HN ]
Re:Microsoft Edge Experimenting with a Super Duper Secure Mode
by asiachick on Thursday August 05, 2021 @01:38AM
(#28070241)
they did mention it in the long description. It's off for now but they are planning on turning it on.
I'd guess it's safer than JIT because the translation to assembly is simple, or can be simple. It's not trying to do the complicated process of analyzing a dynamically typed language and applying different ways of optimizing.
Re:Microsoft Edge Experimenting with a Super Duper Secure Mode
by csande17 on Thursday August 05, 2021 @06:01AM
(#28071692)
I bet they'll end up using a pure bytecode interpreter for Web Assembly as well, that just runs the operations one by one instead of converting them to machine code. It'd be the same "slower but safer" trade-off that the mode uses for regular Javascript.
Re:Microsoft Edge Experimenting with a Super Duper Secure Mode
by tinus_hn on Thursday August 05, 2021 @02:31AM
(#28070545)
I’m sure there’s a great reason but the policy description reads like ‘turn this on for more security and no important downsides’
> Disables the JIT and enables new security mitigations to provide a more secure browsing experience - Windows