4 ms·

You also have to ensure that "window.crypto.getRandomValues = function(y) {};" wasn't executed earlier.

• Drakim 14y ago
  Hmmm, interesting. I think you can check if a function is native or not by casting the function to a string, and I don't think there are any native functions the attacker would stand to gain anything by swapping.
  • ema 14y ago
    > I think you can check if a function is native or not by casting the function to a string you can swap the toString method too.
    • visarga 14y ago
      That's just nasty!
• csuwldcat 14y ago
  There are a multitude of natively available browser functions that are immutable and cannot be CRUD'd. This guy really needs to understand more about the browser. His commentary on client storage in the browser also is myopic.