3 ms·
Some quotes from the summary article which is being discussed here: https://news.ycombinator.com/item?id=13648122 https://news.ycombinator.com/item?id=13648122
by j_s 10y ago
Some quotes from the summary article which is being discussed here: https://news.ycombinator.com/item?id=13648122 https://news.ycombinator.com/item?id=13648122
In this project, we show that the limitations of ASLR is fundamental to how modern processors manage memory and build an attack that can fully derandomize ASLR from JavaScript without relying on any software feature.
...
Recently, browser vendors have broken the precise JavaScript timer, performance.now(), in order to thwart cache attacks. We built two new timers that bypasses this mitigation in order to make the AnC attack work.
...
Some processor vendors agreed with our findings that ASLR is no longer a viable security defense at least for the browsers.
- gbrown_ 10y ago> at least for the browsers Indeed this seems to be key here, the browser is a fairly large sandbox to play in. For "traditional" server side daemons ALSR is certainly a worthwhile layer in the security of a system.