News for hackers. Stuff that matters.
Re:Chrome Ships WebGPU by fulafel on Thursday April 06, 2023 @06:50AM (#35466638)
In this case the runtime would not be able to guarantee that the timing has no externally observable side effects (at least if you do something with t). It would then run in the fixed execution speed mode.
Re:Chrome Ships WebGPU by hexo on Thursday April 06, 2023 @07:01AM (#35466708)
Runtime doesnt have full controll but could introduce a lot of noise in timing and performance. Could it help?
Re:Chrome Ships WebGPU by fulafel on Thursday April 06, 2023 @07:10AM (#35466773)
It's hard to reason about how much noise is guaranteed to be enough, because it depends on how much measurement the adversary has a chance to do, there could be collusion beween several sites, etc. To allow timing API usage I'd be more inclined toward the virtual time thing I mentioned upthread.
Re:Chrome Ships WebGPU by foldr on Thursday April 06, 2023 @08:56AM (#35467733)
Lots of code accesses the current time. So I think you'd end up just running 90% of realistic code in the fixed execution speed mode, which wouldn't be sufficiently performant.