3 ms·
With JavaScript in Browsers, every consumer pc runs untrusted code every day.
by ant6n 5y ago
With JavaScript in Browsers, every consumer pc runs untrusted code every day.
- patrickthebold 5y agoI don't think it's so black and white. When I install some software I'm trusting the developer and the package maintainer, and I'm sure others. If I go to gmail, I'm trusting google. That's not a huge difference at the end of the day. I suppose it's easier to navigate around to lots of websites than it is to go an install a bunch of software. But then again, browser exploits have been a thing forever. I expect that something bad will happen to my computer if I'm visiting shady websites. So my question is: are shady websites _more_ dangerous now that these side channel attacks have been discovered? (serious question.)
- remram 5y agoYou're trusting Google to do what? Google is not trying to attack you, but they are using a different threat model than what you describe. In particular Google is in the business of serving ads to you, that they do not author themselves, and are written with the assumption that you are not blindly running all their code ring0.
- acdha 5y agoBut they do so in a highly-sandboxed environment which has constantly evolving mitigations to counter exactly this threat.