5 ms·
I guess at this point same process native code sandboxing approaches like Vx32 and NaCl are more or less dead due to the various speculative execution attacks t
by Karliss 3y ago
I guess at this point same process native code sandboxing approaches like Vx32 and NaCl are more or less dead due to the various speculative execution attacks that came up in the recent few years.
- remram 3y agoYou can take the same approach as browsers: block the guest from using high-precision timing functions.
- rwmj 3y agoCan't you synthesize these from simple loops, especially if the untrusted code is able to use threads?
- remram 3y agoYou mean only if the untrusted code is able to use threads. Yes maybe, that just makes it even less reliable and time-consuming.
- c7DJTLrn 3y agoThat's a mitigation, not a solution unfortunately. There have been PoCs that work without high precision timing.
- pjmlp 3y agoSame applies to WASM, regardless of the security sales pitch.