4 ms·
IIRC the original attack was a JS heap spray (using JavaScript Typed Arrays, no less), so not only would the browser have to be written in rust, but also the Ja
by olsonjeffery 13y ago
IIRC the original attack was a JS heap spray (using JavaScript Typed Arrays, no less), so not only would the browser have to be written in rust, but also the JavaScript engine which, AFAIK, isn't on Mozilla's roadmap (but I don't speak for them).
- khuey 13y agoUh, no. A heap spray is not an attack. It's a method of exploiting a vulnerability, but it's a) trivial to do and b) useless without said vuln. Also rewriting the JS engine in Rust doesn't change the ability to heap spray.