3 ms·
Now someone has to come up with a JavaScript version of this exploit and the disaster is complete.
by Kenji 12y ago
Now someone has to come up with a JavaScript version of this exploit and the disaster is complete.
- yuhong 12y agoMore difficult since you can't execute CLFLUSH from there.
- Kenji 12y agoMaybe some JS commands trigger a CLFLUSH internally. I don't know, but it'd be "funny" if that exploit worked in JS.
- makomk 12y agoMaybe, though as they say it'd potentially be possible to cause a cache spill and attack it that way. I was looking at the associativity of various CPU caches with a vague eye to trying this in JavaScript a few days back and in theory it shouldn't take many reads to evict a cache line, so long as they're from the right addresses.