Chrome 67 Site Isolation stops Spectre bug exploits but hog more memory

Chrome 67 Site Isolation stops Spectre bug exploits but hog more memory

As you may recall, such attacks use the speculative execution features of most processors to access sections of memory that should be off-limits to a piece of code.

Google has enabled Site Isolation for as much as 99 percent of users on Windows, macOS, Linux, and Chrome OS, however, a one percent user base hasn't been considered to monitor and improve performance.

This is a major change to the previous multi-process architecture in Chrome in which there were ways to connect to other sites in the same process using iframes or cross-site pop-ups. Site Isolation will soon be available by default on Chrome for Android apps.

Spectre and Meltdown are fundamental hardware level issues impacting almost every modern microprocessor.

Load chrome://flags/#enable-site-per-process in the browser's address bar.

Explosion at chemical plant kills 19 in China
Last year, an explosion at a petrochemical plant in eastern Shandong province killed eight people and injured nine. The authorities and local police are investigating to find out what caused the blast.

"Google's site isolation appears to work as a means of separation". However, the Site Isolation feature narrows the scope, limiting each renderer process to documents from at most one site. Spectre steals data from a legitimate site by gaining access to this shared memory.

Google has confirmed that the latest version of the browser now includes browser-side site isolation fixes to mitigate the Spectre vulnerability inherent in most modern CPUs. Chrome developers call the project the Material Design Refresh, where it lists a range of visible and not-so-visible changes taking place with adjustments to icon colors, bookmarks, tabs, the toolbar, avatar buttons, tab-loading animations and more.

A given tab could even switch processes when navigating to a new site in some cases.

It's worth noting that even if you disable it, at some point Google will probably make this the default behavior and remove the ability to disable it, because site isolation is a lot more secure. According to Google, the additional processes generated by Site Isolation produce a 10 to 13 percent increase in memory overhead. To date, most others have disabled the same types of precise timers as Chrome. This limits an attacker to obtain user data using malicious JavaScript code.

By this separation of processes, Google aims to prevent direct memory reading across different processes to safeguard users' data. Researchers were still discovering new vulnerabilities related to Spectre early this year. However, neither Mozilla nor Microsoft provided any indication when or if site isolation may be coming to Firefox, Edge, or Internet Explorer.

Related Articles

  • Oppo Find X vs OnePlus 6: Specification, price, features compared

    Oppo Find X vs OnePlus 6: Specification, price, features compared

    When it comes to the motorized camera , I'm a little anxious about what happens if you drop the phone - and no, I've not tried. Oppo has become the first Android smartphone maker to feature 3D Structured Light Technology in their new Oppo find X .
    Trump says he intends to run for president in 2020

    Trump says he intends to run for president in 2020

    A video making the rounds online shows Trump briefly walking ahead of the Queen as they strolled the grounds of Windsor Castle . As tweeted by Morgan, Air Force One sat on the tarmac for 30 minutes while the British TV star chatted with Trump.
    Woman Survives Seven Days On Radiator Water After California Car Crash

    Woman Survives Seven Days On Radiator Water After California Car Crash

    Ms Hernandez was conscious when she was discovered by Chad and Chelsea Moore, although she had sustained a shoulder injury. To stay hydrated, Hernandez reportedly used a radiator hose from her vehicle to siphon water from a nearby stream.
  • Hazard and Courtois blast France after World Cup semi-final defeat

    Hazard and Courtois blast France after World Cup semi-final defeat

    Didier Deschamps' side advanced to the finals and will try to win the first title since 1998 when they meet England or Croatia. It was a closely contested game as France emerged victorious thanks to Samuel Umtiti's goal early in the second half.
    Karunaratne sets record, Sri Lanka makes 287

    Karunaratne sets record, Sri Lanka makes 287

    He played with maturity in the tough conditions in West Indies and much will depend on how he carries himself in this series. The International Cricket Council, the world governing body of the sport, is due to announce a verdict in the case soon.
    May says Trump told her to 'sue the EU'

    May says Trump told her to 'sue the EU'

    While there was a small pro-Trump rally that took place in London on Saturday, that was after his interview with the Daily Mail . While Trump did meet with the Queen on Saturday, his visit has done little to fix his negative image in the U.K.
  • Pak vs Zim, Ist ODI: Ton-up Imam, Fakhar lift Pakistan to 308

    Pak vs Zim, Ist ODI: Ton-up Imam, Fakhar lift Pakistan to 308

    Opener Imam-u-Haq scored a magnificent century and took his side to 308/7 in the first ODI match against Zimbabwe on Friday. While they won one match by 104 runs, the other two triumphs were by seven runs and five runs respectively.
    #StatAttack: 5 longest Grand Slam Tennis matches ever

    #StatAttack: 5 longest Grand Slam Tennis matches ever

    Djokovic defends nearly as well as Nadal - on non-clay surfaces it must be mentioned - and attacks even better. The last men's semifinal to be finished on Saturday was in 2007, also between Nadal and Djokovic .
    Paul Pogba 'offered to Barcelona'

    Paul Pogba 'offered to Barcelona'

    They are solid. "I don't think that tiredness will play a part as you overcome it when you play in a final". It's a dream for everybody but you have to realise a dream.
  • MacBook Pro Brings True Tone to Apple Thunderbolt, LG UltraFine Displays

    MacBook Pro Brings True Tone to Apple Thunderbolt, LG UltraFine Displays

    Less touted, however, was an "improved third-generation keyboard" which only promises to offer a quieter typing experience. That fix program doesn't cover the new models, which is another sign that Apple is confident about the tweaked design.
    Aston Martin builds a pocket rocket

    Aston Martin builds a pocket rocket

    Feast your eyes on the Aston Martin V8 Cygnet , possibly the strangest model to emerge from the marque in its 105-year history. You do, at least, get air conditioning, two USB ports, and leather pull-straps for the carbon door trim.
    Air strike in eastern Syria kills at least 28 people

    Air strike in eastern Syria kills at least 28 people

    It was not immediately clear if the raid was carried out by an Iraqi plane or by one of the US-led Coalition fighting ISIS. The nearby town of Albu Kamal, on the western bank of the Euphrates, was retaken by Syrian government forces in December.