4 ms·
For someone not really familiar with javascript could someone explain how sensitive information is removed from memory when no longer needed? Does the runtime e
by gbrown_ 10y ago
For someone not really familiar with javascript could someone explain how sensitive information is removed from memory when no longer needed? Does the runtime expose semantics to ensure memory is zeroed?
Also given javascript is garbage collected are there concerns about timing attacks? Or can you prevent the GC from running in critical sections like Go (I assume Java offers this too)?
- nerdponx 10y agoThis is my question as well. I've seen plenty of advice about how Python is a bad choice for any crypto application because it's almost impossible to secure Python's memory. Is JS different somehow?
- ms7 10y agoI can't answer your questions with certainty, but for those who can, could ES6 WeakMap address these two things?
- bgran 10y agoWeakMap just allows you to tell the GC "don't hold on to this memory just because I'm using it as a key in this Map" -- it doesn't let you tell the GC what to actually do with the memory.
- stevens32 10y agoCouldn't buffers be used for explicit memory control? I think that was how emscripten implemented memory management