3 ms·

> Thankfully the exploit is highly dependent on a specific asm routine so exploiting it from JS or WASM in a browser should be extremely difficult. Otherwise a

by loeg 3y ago

> Thankfully the exploit is highly dependent on a specific asm routine so exploiting it from JS or WASM in a browser should be extremely difficult. Otherwise a nefarious tab left open for hours in the background could exfiltrate without an issue. At least one commentor here claims to be able to reproduce this with javascript: https://news.ycombinator.com/item?id=36849767 https://news.ycombinator.com/item?id=36849767 .

IshKebab 3y ago
A very bold claim with zero evidence.
- saagarjha 3y ago
  What about it is very bold? The instruction sequence mentioned seems pretty reasonable and not at all out of the question for a JavaScript JIT to generate.
  - felix-ht 3y ago
    It should be possible to patch this from the browser side as well.