3 ms·
> The resolution of performance.now() will be reduced to 20µs. That will reduce the data rate of this particular covert channel, not prevent the attack altoget
by kbwt 9y ago
> The resolution of performance.now() will be reduced to 20µs.
That will reduce the data rate of this particular covert channel, not prevent the attack altogether. Even adding random noise would not rule out the attack.
- tanilama 9y agoI guess that is why they term it as mitigation, since they cannot fix it.
- discoursism 9y agoPresumably they are aware of this. If they reduce the data rate enough, the attack becomes less useful in practice. Presumably their engagements with security researchers and other browser vendors, along with internal experimentation, led them to believe that this resolution decrease offered significant mitigation.