News for hackers. Stuff that matters.

A comment on Cryptography in the Browser. Parent comment

Re:Cryptography in the Browser by tptacek on Tuesday October 29, 2013 @09:16PM (#6638800)
How exactly do you use a plugin to verify the state of a Javascript runtime? You can't just verify assets; you need to verify the current bindings of every function relevant to your crypto code.
[ Parent | on HN ]
Re:Cryptography in the Browser by Jach on Wednesday October 30, 2013 @12:07AM (#6639430)
How are the bindings supposed to change without loading different assets, apart from an eval() somewhere?
[ Parent | on HN ]
Re:Cryptography in the Browser by tptacek on Wednesday October 30, 2013 @11:22AM (#6640976)
List every possible way a browser Javascript application might end up rebinding a function.
[ Parent | on HN ]