3 ms·
If I want to make all software programmable, I install Frida and easily hook into pretty much anything at the same privilege level. Still, misleading headline
by hybid 4y ago
If I want to make all software programmable, I install Frida and easily hook into pretty much anything at the same privilege level.
Still, misleading headline aside, this sounds pretty cool as a reasonably well sandboxed plug-in architecture for software that chooses to use it.
Though if running in-process, it seems unlikely to be able to defend against hostile plugins that use e.g. speculative execution techniques to extract otherwise inaccessible data. But perhaps that's not the threat model here.
- warpech 4y agoFor those who don't know what Frida is: https://frida.re/ https://frida.re/ I must say, this sentence from their docs describe it the best to me: Greasemonkey for native apps It has little to do with Extism, but still is interesting.