News for hackers. Stuff that matters.

A comment on Hertzbleed Attack. Parent comment

Re:Hertzbleed Attack by lossolo on Tuesday June 14, 2022 @06:51PM (#31746988)
> imagine a browser that encrypts local storage with a system key. If I understand correctly, by storing different patterns of bits, Hertzbleed might be able to extract the system key from the timings to save data.

Don't you need precise clocks for this in JS? The ones that were disabled in browsers after Meltdown/Spectre.

[ Parent | on HN ]
Re:Hertzbleed Attack by mintplant on Wednesday June 15, 2022 @12:43AM (#31749199)
A lot of that has since been rolled back as different mitigations have been deployed against Spectre.
[ Parent | on HN ]
Re:Hertzbleed Attack by slimsag on Wednesday June 15, 2022 @01:15AM (#31749371)
Source? The MDN is very clear about precise timing not being available due to Spectre mitigations.
[ Parent | on HN ]