4 ms·
Yes. But it's incredibly hard to pull off. My understanding is that the theory of this attack was introduced with Spectre. iLeakage adds enough research to cre
by paulirish 3y ago
Yes. But it's incredibly hard to pull off.
My understanding is that the theory of this attack was introduced with Spectre. iLeakage adds enough research to create a working proof-of-concept, plus acknowledgment that, as of last year, it wasn't addressed in Safari.
More on site isolation (the functionality that mitigates these attacks):
https://w3c.github.io/webappsec-post-spectre-webdev/ https://w3c.github.io/webappsec-post-spectre-webdev/
https://www.chromium.org/Home/chromium-security/site-isolation/ https://www.chromium.org/Home/chromium-security/site-isolati...
https://blog.chromium.org/2021/03/mitigating-side-channel-attacks.html https://blog.chromium.org/2021/03/mitigating-side-channel-at...
- mccr8 3y agoThere have long been working Spectre attacks. From skimming the paper a bit, I think the contribution of this work is that they have come up with an attack that works on Apple's processors, as well as bypasses for a number of mitigations WebKit has (that fall short of site isolation).
- jefozabuss 3y agoI think it's not that hard to pull this off as you can disguise this with a "social login" feature. E.g. imagine a website promoting raffles / free prizes if you log in with fb/insta/etc, there are way too many gullible users who'd use these pages. I'd not be surprised if accounts used in troll farms /bots/ are stolen this way.