A kind reminder we would like all registered users to weigh in on one of our forum's security policies.
Please take a moment to read this thread and place a vote.
https://forum.palemoon.org/viewtopic.php?f=17&t=32935

Google Chrome Adds V8 Sandbox - A New Defense Against Browser Attacks

Off-topic discussion/chat/argue area with special rules of engagement.
Forum rules
The Off-Topic area is a general community discussion and chat area with special rules of engagement.

Enter, read and post at your own risk. You have been warned!
While our staff will try to guide the herd into sensible directions, this board is a mostly unrestricted zone where almost anything can be discussed, including matters not directly related to the project, technology or similar adjacent topics.

We do, however, require that you:
  • Do not post anything pornographic.
  • Do not post hate speech in the traditional sense of the term.
  • Do not post content that is illegal (including links to protected software, cracks, etc.)
  • Do not post commercial advertisements, SEO links or SPAM posts.
We also ask that you keep strongly polarizing topics like politics and religion to a minimum. This forum is not the right place to discuss such things.
Please do exercise some common sense. How you act here will inevitably influence how you are treated elsewhere.
User avatar
suzyne
Keeps coming back
Keeps coming back
Posts: 782
Joined: 2023-06-28, 22:43
Location: Australia

Google Chrome Adds V8 Sandbox - A New Defense Against Browser Attacks

Post by suzyne » 2024-04-09, 22:43

I understood less than 50% of this article, but my take away is that the way Chrome works is a security nightmare?

https://thehackernews.com/2024/04/google-chrome-adds-v8-sandbox-new.html
Laptop 1: Windows 11 64-bit, i7 @ 2.80GHz, 16GB, NVIDIA GeForce MX450.
Laptop 2: Windows 10 32-bit, Atom Z3735F @ 1.33GHz, 2GB, Intel HD Graphics.
Laptop 3: Linux Mint 20.3 64-bit, i5 @ 2.5GHz, 8GB, Intel HD Graphics 620.
Top
User avatar
moonbat
Knows the dark side
Knows the dark side
Posts: 5720
Joined: 2015-12-09, 15:45

Re: Google Chrome Adds V8 Sandbox - A New Defense Against Browser Attacks

Post by moonbat » 2024-04-09, 23:52

It anyway is a security nightmare thanks to their efforts to change a web browser from being primarily a document parser to a freaking virtual machine by importing several features that used to be left to the OS. Larger code base = larger attack surface.
"One hosts to look them up, one DNS to find them and in the darkness BIND them."

Image
KDE Neon on a Slimbook Excalibur (Ryzen 7 8845HS, 64 GB RAM)
AutoPageColor|PermissionsPlus|PMPlayer|Pure URL|RecordRewind|TextFX
Jabber: moonbat@hot-chili.net
Top
User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 38522
Joined: 2011-08-28, 17:27
Location: Sweden

Re: Google Chrome Adds V8 Sandbox - A New Defense Against Browser Attacks

Post by Moonchild » 2024-04-10, 08:18

So.. they are basically telling us that Chrome didn't have basic protections in place that we've had for many years?
XD
"There is no point in arguing with an idiot, because then you're both idiots." - Anonymous
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite
Top
User avatar
jobbautista9
Board Warrior
Board Warrior
Posts: 1086
Joined: 2020-11-03, 06:47
Location: Philippines

Re: Google Chrome Adds V8 Sandbox - A New Defense Against Browser Attacks

Post by jobbautista9 » 2024-04-12, 04:11

Yeah wtf. I've read so many of Spidermonkey's source code than I wanted during my work on separating mozjs from monolithic xul, and I'm pretty sure I remember our SM already doing plenty of things mentioned in the article... :coffee:
Image

Tired of creating stuff!

Avatar artwork by Shinki669: https://www.pixiv.net/artworks/113645617

XUL add-ons developer. You can find a list of add-ons I manage at http://rw.rs/~job/software.html.
Top

Return to “Off-Topic”