3 ms·

I think it’s time to recognize that the web browser engine needs to be a trusted, hardened system-level component to protect user security: these engines deals

by riscy 3y ago

I think it’s time to recognize that the web browser engine needs to be a trusted, hardened system-level component to protect user security: these engines deals directly with executing untrusted code being served from potential attackers.

tayistay 3y ago
Can that be done without disabling JIT for the rest of us? My app would benefit greatly from JIT compilation, and it's always been a bummer that it can't realize its full performance potential on iOS.
- riscy 3y ago
  No. A JIT requires marking pages of runtime-generated data as executable. It’s an attacker’s dream: https://en.wikipedia.org/wiki/JIT_spraying https://en.wikipedia.org/wiki/JIT_spraying The entire compiler and language-runtime using a JIT becomes an attack surface. Securing Javascript is hard enough.
arzig 3y ago
Some interesting research I found through serenity os suggesting jit may not be worth it for most things. https://microsoftedge.github.io/edgevr/posts/Super-Duper-Secure-Mode/ https://microsoftedge.github.io/edgevr/posts/Super-Duper-Sec...