4 ms·
From the Spectre whitepaper: > In addition to violating process isolation boundaries using native code, Spectre attacks can also be used to violate browser san
by porjo 9y ago
From the Spectre whitepaper:
> In addition to violating process isolation boundaries using native code, Spectre attacks can also be used to violate browser sandboxing, by mounting them via portable JavaScript code. We wrote a JavaScript program that successfully reads data from the address space of the browser process running it.
The whitepaper doesn't contain example JS code however
- diyseguy 9y agoThis whitepaper describes the Javascript exploit in Section IV. I'm struggling to understand it though: http://www.cs.vu.nl/~herbertb/download/papers/anc_ndss17.pdf http://www.cs.vu.nl/~herbertb/download/papers/anc_ndss17.pdf
- diyseguy 9y agoThis too was provided as a proof of concept (without explanation): https://brainsmoke.github.io/misc/slicepattern.html https://brainsmoke.github.io/misc/slicepattern.html. I'm not sure what I'm looking at though
- diyseguy 9y agoThis is the first implementation in Javascript I have seen so far: http://xlab.tencent.com/special/spectre/js/check.js http://xlab.tencent.com/special/spectre/js/check.js