4 ms·
> JavaScript […] is a demonstrated attack vector Does that mean that we are soon going to be vulnerable to remote exploits via WASM as well? Do mitigation atte
by ahakki 9y ago
> JavaScript […] is a demonstrated attack vector
Does that mean that we are soon going to be vulnerable to remote exploits via WASM as well? Do mitigation attempts such as reducing the JavaScript timing resolution aslo apply to WASM?
- keyme 9y agoThey do apply to WASM. However, these mitigations are hardly air tight. I'd expect new exploits anyways.
- Xylakant 9y agoAll that these mitigations did was disable all obvious precise timers. All you need for a new attack is a novel way to create a precise timer. And since it’s now known how valueable such a timer would be, I’m certain that minds more clever than me will take a shot at this.
- deleted 9y ago[deleted]