News for hackers. Stuff that matters.

A comment on Vivaldi Takes a Bite Out of the Apple: Introducing Vivaldi on iOS. Parent comment

Re:Vivaldi Takes a Bite Out of the Apple: Introducing Vivald... by riscy on Thursday October 05, 2023 @09:18PM (#37786208)
No. A JIT requires marking pages of runtime-generated data as executable. It’s an attacker’s dream: https://en.wikipedia.org/wiki/JIT_spraying

The entire compiler and language-runtime using a JIT becomes an attack surface. Securing Javascript is hard enough.

[ Parent | on HN ]

There are no comments on this comment yet.