Re:Ladybird: A new cross-platform browser project
by alexb_ on Monday September 12, 2022 @01:49PM
(#32814100)
Would this prevent me from looking at or modifying the Javascript code that is running, since it's already compiled?
[ Parent
| on HN ]
Re:Ladybird: A new cross-platform browser project
by genezeta on Monday September 12, 2022 @02:34PM
(#32814765)
This is a completely different thing.
The "super duper secure mode" is not at all about you accessing or modifying the JS code from a website you are visiting. What it is about is trying to protect against some piece of JS code bypassing the security of the browser sandbox and accessing stuff it shouldn't ever have access to.
:)
Edit: Also, in general, no, disabling JIT would not prevent any particular JS code or extension from running. At most, it might mean some code would run slower. But that's what they claim, that it isn't noticeable.
Re:Ladybird: A new cross-platform browser project
by alexb_ on Monday September 12, 2022 @02:38PM
(#32814821)
Thanks for the clarification.
Re:Ladybird: A new cross-platform browser project
by fluidcruft on Monday September 12, 2022 @02:05PM
(#32814345)
Hmmm. Maybe I misunderstood the link or missed something. I thought all they did is disable JIT and leave the JS as interpreted.
Re:Ladybird: A new cross-platform browser project
by alexb_ on Monday September 12, 2022 @02:17PM
(#32814526)
I'm not knowledgable with JS at all, so you're probably right. I do wonder what the "Code Integrity Guard" is going to mean - who has to sign the JS? Does this mean tampermonkey/adblock scripts would stop working? Genuinely asking as like I said I don't really know too much about javascript
Re:Ladybird: A new cross-platform browser project
by wzdd on Monday September 12, 2022 @02:50PM
(#32815003)
This seems to be referring to https://docs.microsoft.com/en-us/microsoft-365/security/defe... which would mean that they require the browser itself to be digitally signed, not the JS.