Hacker News Reader

> JavaScript […] is a demonstrated attack vector

Does that mean that we are soon going to be vulnerable to remote exploits via WASM as well? Do mitigation attempts such as reducing the JavaScript timing resolution aslo apply to WASM?

View on HN

They do apply to WASM. However, these mitigations are hardly air tight. I'd expect new exploits anyways.

All that these mitigations did was disable all obvious precise timers. All you need for a new attack is a novel way to create a precise timer. And since it’s now known how valueable such a timer would be, I’m certain that minds more clever than me will take a shot at this.

Reply on news.ycombinator.com