News for hackers. Stuff that matters.

A comment on Scramble.io: secure email for everyone. Parent comment

Re:Scramble.io: secure email for everyone by hershel on Tuesday November 05, 2013 @12:42PM (#6676524)
This relatively old webpage[1] talks about the possibility of side channel attacks in javascript(among other things).I believe this applies to Phonegap.

[1]https://hellais.wordpress.com/2011/12/27/how-to-improve-java...

[ Parent | on HN ]
Re:Scramble.io: secure email for everyone by revdinosaur on Tuesday November 05, 2013 @03:29PM (#6678006)
Thank you, these sorts of timing attacks are very interesting. I was asking for clarification because I am curious about vectors such as these; vulnerabilities in JS runtime or in HTML/CSS. This thinking was spurred by an article posted here not to long ago[1] about timing attacks on CSS and SVG shaders through requestAnimationFrame.

[1] http://www.contextis.com/files/Browser_Timing_Attacks.pdf

[ Parent | on HN ]