11 ms·
Ah, you’re concerned about person using js to execute the side channel portion of the attack, not the bit creating the side channel :)
by olliej 3y ago
Ah, you’re concerned about person using js to execute the side channel portion of the attack, not the bit creating the side channel :)
- cryptonector 3y agoFYI malicious JS executing in victim users' browsers is a huge concern. All sorts of vulnerabilities can be exploited via JS in this way -- every local side-channel like Spectre/Meltdown, worse things like Row Hammer, etc.