2 ms·
No, the attack would be implemented in JS, not the victim code (though, that too, but that's not what's interesting here).
by cryptonector 3y ago
No, the attack would be implemented in JS, not the victim code (though, that too, but that's not what's interesting here).
- olliej 3y agoAh, you’re concerned about person using js to execute the side channel portion of the attack, not the bit creating the side channel :)
- cryptonector 3y agoFYI malicious JS executing in victim users' browsers is a huge concern. All sorts of vulnerabilities can be exploited via JS in this way -- every local side-channel like Spectre/Meltdown, worse things like Row Hammer, etc.