3 ms·
Won't this work become mostly irrelevant in the near future (at least for new hardward)? There is no way all affected software will implement workarounds like t
by eikenberry 8y ago
Won't this work become mostly irrelevant in the near future (at least for new hardward)? There is no way all affected software will implement workarounds like this and it this will have to be fixed at the hardware/CPU level in order to fully address it.
- robbyt 8y agoI'm sure it's possible to detect if it's fixed in hardware and disable the additional software protection
- Eridrus 8y agoNot all software is equally affected by this, browsers are particularly affected because they have a JavaScript VM running untrusted code. But Site Isolation has been in the works in Chrome for a long time and it brings additional protections because it means that exploiting a renderer process doesn't let you break the SOP, which means you absolutely have to break out of the renderer process to have a meaningful exploit - completely removing the renderer codebase from your trusted computing base.