4 ms·
The real solution is to stop executing untrusted code that was just downloaded from some random place on the internet. You can't both simultaneously optimize a
by exabrial 3y ago
The real solution is to stop executing untrusted code that was just downloaded from some random place on the internet. You can't both simultaneously optimize a runtime and secure it for untrusted execution. You have to execute it in a de-optimized manner to avoid any sidechannel leakage. We'll keep discovering these 'bugs' until we do what we did to Java Applets.
- phh 3y agoI hate most usages of javascript, and I want to be running only opensource components that I trust. So I should agree with you. But that doesn't sound realistic to me, even in dreams.
- zamadatix 3y agoJavascript runs surprisingly well without optimization. I think it was the Chromium based version of Edge, of all browsers, that was the first to offer doing so as a security pitch.
- TazeTSchnitzel 3y agoGeneral purpose computers are wonderful because they can run so many diverse applications. If you get rid of “untrusted code”, people will still make thousands of apps be “trusted” on their machines. There is no more-secure past we can return to.
- deleted 3y ago[deleted]
- pjmlp 3y agoThat past seems to be left for the Linux desktop, given that Microsoft already signaled at Blue Hat IL 2023 that development certificates will be coming into Windows, maybe by Windows 12 time frame, similar to notarized apps on macOS, or the whole mobile ecosystem.
- FpUser 3y agoAre those somehow different from code signing certificates I use already for ages for my Windows products?
- bitwize 3y agoWhat Linux desktop? The only way Linux will be available on readily available personal computers is via WSL, aka Other OS for PCs... and just as likely to be taken away once it threatens Microsoft's security posture/bottom line. General purpose computing is dead. The only way to reasonably assure lack of self-foot-shooting by end users is a mandatory signed code path from power on right down to application level software. I'd say Raspberry Pi is an alternative, but the Raspberry Pi Foundation is committing an epic, Commodore-style self-own right now and the future of that platform is in jeopardy. Orange Pi and the like are nonstarters.
- vlovich123 3y agoSo we should ban the cloud? It runs untrusted code that was just downloaded from some random place on the internet.
- chaxor 3y agoWhat is untrusted code? Everyone has different threat models. Some may treat Linux or BSD as untrusted.