3 ms·
It strikes me as odd that Project Zero is listed as having discovered this in mid-2017. It seems like this vulnerability and the browser mitigations being cons
by wyldfire 9y ago
It strikes me as odd that Project Zero is listed as having discovered this in mid-2017. It seems like this vulnerability and the browser mitigations being considered only just now were discussed quite some time ago:
This comment was on April 7, 2017:
https://news.ycombinator.com/item?id=14057091 https://news.ycombinator.com/item?id=14057091
And this one from 2015?
https://github.com/tc39/ecmascript_sharedmem/issues/1 https://github.com/tc39/ecmascript_sharedmem/issues/1
- sethev 9y agoThe new discovery was that there's a speculative execution side channel. Those links are discussing the potential of a cache side channel which is very different thing. It's the difference between "i might be able to infer some things that are in the cache that something else put there" and "please give me the contents of this address".