How so? As far as I understand, being able to leak an ASLR slide from JavaScript... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		saagarjha on July 22, 2020 \| parent \| context \| favorite \| on: RIP ROP: CET Internals in Windows 20H1 How so? As far as I understand, being able to leak an ASLR slide from JavaScript is considered to be a security bug in every browser engine, because they do not intentionally provide access to that information.

staticassertion on July 22, 2020 [–]

Whether the browser intends to provide that information or not, ASLR was not designed as a control against an attacker who can run near arbitrary code in the process.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact