NEW: Google Chrome post on the Meltdown/Spectre attack and mitigations. Does have relevance to web. https://www.chromium.org/Home/chromium-security/ssca …
Show this thread
-
"Attackers can load such URLs in their attack pages (e.g. <img src=”https://email.example.com/inbox.json ”/>) to get the sensitive information into the process rendering their page, and can then use out-of-bounds reads to discover the information."
Show this thread
Old and busted: Kidnapping Bitcoin users New hotness: Keeping Bitcoin users on a webpage long enough to dump memory and find their Bitcoin wallet private key through JavaScript
-
-
CoinVille, the JavaScript farming game for Bitcoin users!
Show this threadThanks. Twitter will use this to make your timeline better. Undo
-
-
-
why are you so damn good at this
Thanks. Twitter will use this to make your timeline better. Undo
-
-
-
Good thing i don't have any webUI's with lots of JS code running open for a long...oh hi slack...
Thanks. Twitter will use this to make your timeline better. Undo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.