The Spy in the Sandbox -- Practical Cache Attacks in Javascript · HackerPapers discussions

The Spy in the Sandbox -- Practical Cache Attacks in Javascript — mentioned by anon1385

Fri, 08 Sep 2017 08:46:34 GMT

>No modern browser lets you know the state of a:visited There are loads of ways to extract that information, and the number increases all the time as browsers get more complex. It's not something browser vendors actually consider to be a bug. They have historically only 'fixed' the trivial methods of getting the visited status because it became an issue that was widely publicised. If they cared at all they would never have implemented features like Shared Array Buffers. This stuff is all sitting in years old open bug reports. Nobody cares. https://bugzilla.mozilla.org/show_bug.cgi?id=884270…

Paper and discussion history. A mention is not an endorsement.

The Spy in the Sandbox -- Practical Cache Attacks in Javascript — mentioned by Sephr

Fri, 07 Apr 2017 04:55:32 GMT

The papers "The Spy in the Sandbox -- Practical Cache Attacks in Javascript" at https://arxiv.org/pdf/1502.07373.pdf and "ASLR on the Line: Practical Cache Attacks on the MMU" at http://www.cs.vu.nl//~herbertb/download/papers/anc_ndss17.pd... are good starting points, though they are not very accessible to a layman. There have even been timing attacks that let you recover AES keys from analyzing a device's power usage. In layman's terms: computers are extremely complicated beasts of coordinated timing of software and hardware, and timing data leaks many things about what a piece of software…

Paper and discussion history. A mention is not an endorsement.

The Spy in the Sandbox -- Practical Cache Attacks in Javascript — mentioned by dalke

Fri, 15 Jul 2016 14:13:01 GMT

Even then, the Rust implementation may not be immune to DRAM rowhammer attacks or side-channel attacks, like how http://arxiv.org/abs/1502.07373 used Javascript.

Paper and discussion history. A mention is not an endorsement.

The Spy in the Sandbox -- Practical Cache Attacks in Javascript — HN submission

Sun, 26 Apr 2015 04:25:39 GMT

The Spy in the Sandbox – Practical Cache Attacks in JavaScript

2 points; 0 discussion replies on HN. Paper and source history. A submission is not an endorsement.

The Spy in the Sandbox -- Practical Cache Attacks in Javascript — HN submission

Wed, 22 Apr 2015 22:17:41 GMT

The Spy in the Sandbox – Practical Cache Attacks in JavaScript

9 points; 1 discussion reply on HN. Paper and source history. A submission is not an endorsement.

The Spy in the Sandbox -- Practical Cache Attacks in Javascript — HN submission

Tue, 21 Apr 2015 21:07:24 GMT

Using JavaScript to Read L3 CPU Cache [pdf]

4 points; 1 discussion reply on HN. Paper and source history. A submission is not an endorsement.

The Spy in the Sandbox -- Practical Cache Attacks in Javascript — HN submission

Wed, 18 Mar 2015 03:38:55 GMT

The Spy in the Sandbox: Practical Cache Attacks in JavaScript

85 points; 4 discussion replies on HN. Paper and source history. A submission is not an endorsement.

The Spy in the Sandbox -- Practical Cache Attacks in Javascript — HN submission

Tue, 17 Mar 2015 12:28:55 GMT

The Spy in the Sandbox – Practical Cache Attacks in JavaScript

2 points; 0 discussion replies on HN. Paper and source history. A submission is not an endorsement.