3 ms·
Is it possible to attack via JS/WASM through the browser? That's pretty much the only unknown code I am running.
by fareesh 6y ago
Is it possible to attack via JS/WASM through the browser? That's pretty much the only unknown code I am running.
- marcosdumay 6y agoIn theory, yes, it should be possible. But I don't think anybody managed to, due to the amount of noise the browsers sandboxes add into the necessary syscalls.
- kllrnohj 6y agoThat's not true at all. Some of the first proof of concept attacks were done in JS. Now the question would be are those attacks still viable given the additional hardening browsers have done independent of the kernel mitigations?
- benibela 6y agoThat is why I got NoScript when the attacks were discovered Although many pages do not work with it, so I disable it quite often I wonder if it is possible to activate the mitigations only for the browser? Or only for one user? I have created a separate user for the browser, so it cannot change my actual files