3 ms·

Is it reliably exploitable from JS, or is it again a theoretical thing nobody has ever bothered to implement in practice? Is there a web page that would show me

Is it reliably exploitable from JS, or is it again a theoretical thing nobody has ever bothered to implement in practice? Is there a web page that would show me some of my kernel memory?

JeremyBanks 6y ago
It's only theoretical until we discover that some state agency got it working three years ago and has been using it to quietly pwn activists since.
bretthoerner 6y ago
https://leaky.page/ https://leaky.page/
deleted 6y ago
[deleted]
saddlerustle 6y ago
https://leaky.page/ https://leaky.page/ will show you browser memory. Kernel memory is not vulnerable with browser sandboxing and current mitigations.
- grishka 6y ago
  The two tests do work for me, but the actual leaking doesn't. No matter how I tweak the parameters, it fails with "error: too many wrong false negatives in leak test (> 20%)". I guess my CPU might just be too old ¯\_(ツ)_/¯
  - 0-_-0 6y ago
    What browser/CPU? I only get "error: could not infer memory layout" on Firefox and Brave with a Zen 3 CPU
    - grishka 6y ago
      Vivaldi and i7-3615QM