3 ms·
It would improve security, but ultimately as long as the file "enclave" can execute javascript, it has access to enough side channels to communicate any data it
by est31 7y ago
It would improve security, but ultimately as long as the file "enclave" can execute javascript, it has access to enough side channels to communicate any data it collects to the outside, so I guess the security concerns wouldn't be fully resolved.
- lucideer 7y agoCan you elaborate on these side channels?
- est31 7y agoOne example: if two programs share the same CPU and have access to CPU resources, then one program could transmit information to another program by putting the CPU under load and removing the load again in some kind of morse code fashion. In computers with fans this would probably be noted by users but not every computer has fans. It's not a very high bandwidth way but enough to get ssh keys transmitted within a few hours of connection.