3 ms·

Under "JavaScript crypto has very real risk of side-channel attacks": End-To-End’s crypto operations are performed in a different process from the web apps it i

• mixedbit 12y ago
  If process isolation is already done, disabling stack dumps for crypto processes seems like a logical next step that shouldn't be hard to accomplish.
  • magicalist 12y ago
    It's probably relying on normal process isolation (and extensions run in a different process), but in order to disable stack dumps for it, you'd have to have some way of indicating "this process is special", which rules out treating it like any other extension. Maybe there could be some new extension permission for "encryption extension" or something, but it's possible that could be abused...
    • tokenizerrr 12y ago
      There's already permissions that are only usable by Google's own extensions, so they could do something like that.