3 ms·
That's not true...at all. There are amplification techniques which work in JS and wasm that amplify a cache eviction into an over 1s delta [1]. Trying to restri
by sweetjuly 3y ago
That's not true...at all. There are amplification techniques which work in JS and wasm that amplify a cache eviction into an over 1s delta [1]. Trying to restrict timing as a mitigation has been known to be ineffective since 2019, a bunch of people at Google who worked on the mitigation in Chromium wrote a paper [2] saying as much. Site isolation is the chosen mitigation because it actually works.
[1] https://www.youtube.com/watch?v=Hx6IVymJ8ZM https://www.youtube.com/watch?v=Hx6IVymJ8ZM
[2] https://arxiv.org/pdf/1902.05178.pdf https://arxiv.org/pdf/1902.05178.pdf