3 ms·
The other drawback is you have less layers of protection if operating in process with language-based and/or tactical mitigations. Just because one abstracts-aw
by stcredzero 8y ago
The other drawback is you have less layers of protection if operating in process with language-based and/or tactical mitigations.
Just because one abstracts-away the sandbox from the users doesn't mean that the sandbox can't be used as a layer of protection. The wiser approach would be to use an additional layer, though it's abstracted away from the user's point of view.
- nickpsecurity 8y agoI agree. Im just emphasizing it since many people think safe languages can be enough security because the forget attacks that break abstraction gaps. One benefit of Spectre/Meltdown and Rowhammer was helping me counter that more easily. :)