3 ms·
His email starts off with this claim: > In a browser, there are 2 main security components you want: The main security advantage is privsep. The other is W^X
by ddtaylor 8y ago
His email starts off with this claim:
> In a browser, there are 2 main security components you want: The main
security advantage is privsep. The other is W^X jit. Other security
effects will follow from those design choices, especially if you have
privsep. For instance, the chrome privsep is nicely refined and pledge
enforcements could be added.
EDIT: Just to be clear I'm not arguing against DEP/W^X but simply appears he is contradicting himself.
- jchw 8y agoTo be more particular, though: - W^X defends against a subset of attacks that privsep defends against. - Privsep is a bigger architectural impact than W^X. The entire app, almost everything, is impacted by privsep. Only the JIT is impacted by W^X. So while it is nice that Firefox has been doing W^X, it doesn't mean they're closer to huge steps like Chrome-level privsep of processes. I hope they are, though.