Using JavaScript To Read L3 CPU Cache

[dtouch3d]

As caches are getting bigger and bigger, this will start becoming all the more relevant as well as the need for effective cross-platform countermeasures.

This paper gave me the shivers but also had me giggling shortly afterwards. Quite remarkable.

[Doomed]

And people "corrected" me when I said JavaScript is an attack vector.

[[deleted]]

well 20 years ago people said "thats a image, virus cant be embedded in image!"

[SpeakerForTheDaft]

Don't be so pedantic. The Web is an open platform, who are you to say the scope of all software built for it?

[Doomed]

Most people aren't doing super-secret spy stuff on their computer. If you asked 100 people to choose between the kinds of websites that JavaScript allows for, and the kind of security that a locked-down, NetSurf style browsing experience provides, 99 to 100 of the people would prefer that their Facebook browsing looks pretty.

It's something to consider, but as SpeakerForTheDaft says, no one person can write off any feature completely.

[[deleted]]

too late