Google Engineers Argue For Linux "ASI" To Better Deal With Speculative Execution Attacks

[carewolf]

I remembered reading that the researcher was able to pull off a timing based attack in javascript...

Before or after all the browsers added random noise to the JS accessible timers?

[NobodyXu]

Before or after all the browsers added random noise to the JS accessible timers?

Sorry but I do not remember the details.

[hotaru]

Before or after all the browsers added random noise to the JS accessible timers?

https://alephsecurity.com/2018/06/26/spectre-browser-query-cache/

[lilunxm12]

most of the things people would want to steal (credentials, encryption keys, etc.) are only a few bytes. restarting your browser more than once per second is probably not something that most people would want to do.

those information are small but I believe to identify the exact alignment of your interest you need much more. It's binary data after all.