4 ms·

Please post an example showing that this works. I'll run the example with OS-mitigations disabled to confirm.

by mahkoh 6y ago

dijit 6y ago
This is a browser checker that does not use the high precision timers: https://jsfiddle.net/lukelol/43015xpv/1/ https://jsfiddle.net/lukelol/43015xpv/1/
- mahkoh 6y ago
  It shows "Browser not exploitable." even after rebooting with mitigations=off.
  - dijit 6y ago
    Congratulations! Now pray that there is not another exploit that can be used. :) Like many things; security is an onion, there are layers to it and removing some of those layers can be fine because the outer layers may protect you, but ultimately you just increase risk.
    - mahkoh 6y ago
      Why did you even post if you were going to resort to "but can you prove that there isn't an exploit?" anyway? I could have saved myself two reboots if you had started with that.
      - dijit 6y ago
        I assume good faith, you asked for an exploit that works without precision timers to test, I provided one. Don’t get mad about the fact it didn’t work, I’m glad it didn’t work, but you can’t walk away with the knowledge that something like that will _never_ work. I’m not sure what you were trying to prove, but you can’t tell people to prove you wrong without any knowledge of what browser you’re running with, or what version or what you’re expecting to see. A “fully working” exploit for the most modern browser is probably possible frankly, but it’s not something that anyone is looking at with seriousness because everyone has mitigation’s enabled anyway. It’s the very definition of high work low reward.
        mahkoh 6y ago
        >I assume good faith, you asked for an exploit that works without precision timers to test, I provided one. No you didn't. You posted some code that doesn't do anything. >I’m not sure what you were trying to prove, but you can’t tell people to prove you wrong I didn't ask anyone to prove me wrong. I asked georgyo to prove his claim that an exploit is possible. You chimed in and posted some nonsense code which obviously does nothing and never did anything even before Meltdown and Specter were mitigated anywhere because even the original native PoC's were much more complicated. >A “fully working” exploit for the most modern browser is probably possible frankly Stop talking out of your ass.
        dijit 6y ago
        I will not respond to such hostile comments other than to say: 1) I posted content which can be used to check the vulnerability of browsers, like you asked. 2) Requiring a specific user "prove you wrong" on a public forum is not conducive to a healthy discussion. It looks more like baiting and bullying. 3) The fact that it did not work does not mean that there is no future repercussions for this class of issues affecting browsers. I will not resort to saying that you're "talking out of your ass", but I will outwardly accuse you of discussing this topic in bad faith.
        dang 6y ago
        You broke the site guidelines badly here. If you wouldn't mind reviewing https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html and sticking to the rules when posting here, we'd be grateful.

Please post an example showing that this works. I'll run the example with OS-mitigations disabled to confirm.

by mahkoh 6y ago

Please post an example showing that this works. I'll run the example with OS-mitigations disabled to confirm.

This is a browser checker that does not use the high precision timers: https://jsfiddle.net/lukelol/43015xpv/1/ https://jsfiddle.net/lukelol/43015xpv/1/

mahkoh 6y ago
It shows "Browser not exploitable." even after rebooting with mitigations=off.
- dijit 6y ago
  Congratulations! Now pray that there is not another exploit that can be used. :) Like many things; security is an onion, there are layers to it and removing some of those layers can be fine because the outer layers may protect you, but ultimately you just increase risk.
  - mahkoh 6y ago
    Why did you even post if you were going to resort to "but can you prove that there isn't an exploit?" anyway? I could have saved myself two reboots if you had started with that.
    - dijit 6y ago
      I assume good faith, you asked for an exploit that works without precision timers to test, I provided one. Don’t get mad about the fact it didn’t work, I’m glad it didn’t work, but you can’t walk away with the knowledge that something like that will _never_ work. I’m not sure what you were trying to prove, but you can’t tell people to prove you wrong without any knowledge of what browser you’re running with, or what version or what you’re expecting to see. A “fully working” exploit for the most modern browser is probably possible frankly, but it’s not something that anyone is looking at with seriousness because everyone has mitigation’s enabled anyway. It’s the very definition of high work low reward.
      - mahkoh 6y ago
        >I assume good faith, you asked for an exploit that works without precision timers to test, I provided one. No you didn't. You posted some code that doesn't do anything. >I’m not sure what you were trying to prove, but you can’t tell people to prove you wrong I didn't ask anyone to prove me wrong. I asked georgyo to prove his claim that an exploit is possible. You chimed in and posted some nonsense code which obviously does nothing and never did anything even before Meltdown and Specter were mitigated anywhere because even the original native PoC's were much more complicated. >A “fully working” exploit for the most modern browser is probably possible frankly Stop talking out of your ass.
        dijit 6y ago
        I will not respond to such hostile comments other than to say: 1) I posted content which can be used to check the vulnerability of browsers, like you asked. 2) Requiring a specific user "prove you wrong" on a public forum is not conducive to a healthy discussion. It looks more like baiting and bullying. 3) The fact that it did not work does not mean that there is no future repercussions for this class of issues affecting browsers. I will not resort to saying that you're "talking out of your ass", but I will outwardly accuse you of discussing this topic in bad faith.
        dang 6y ago
        You broke the site guidelines badly here. If you wouldn't mind reviewing https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html and sticking to the rules when posting here, we'd be grateful.