3 ms·
If instead of measuring time directly attacker would try to increment a counter in a loop in another thread, would they get enough accuracy and precision for th
by anonymfus 9y ago
If instead of measuring time directly attacker would try to increment a counter in a loop in another thread, would they get enough accuracy and precision for the attack to work?
- simcop2387 9y agoThat's exactly what the shared buffer array thing is about. You can use a webworker to do exactly that and still get accurate enough timing to do accomplish this.
- geofft 9y agoAs I understand it, the only synchronous channel between browser-JS threads of any sort (workers, separate tabs/iframes) is a SharedArrayBuffer. Without that, you just have async things like postMessage or leaving notes for other threads in local storage / cookies / etc., so you can't read two different values from the counter within one timeslice without SharedArrayBuffers.