Chrome 67 Site Isolation stops Spectre bug exploits but hog more memory

Chrome 67 Site Isolation stops Spectre bug exploits but hog more memory

As you may recall, such attacks use the speculative execution features of most processors to access sections of memory that should be off-limits to a piece of code.

Google has enabled Site Isolation for as much as 99 percent of users on Windows, macOS, Linux, and Chrome OS, however, a one percent user base hasn't been considered to monitor and improve performance.

This is a major change to the previous multi-process architecture in Chrome in which there were ways to connect to other sites in the same process using iframes or cross-site pop-ups. Site Isolation will soon be available by default on Chrome for Android apps.

Spectre and Meltdown are fundamental hardware level issues impacting almost every modern microprocessor.

Load chrome://flags/#enable-site-per-process in the browser's address bar.

Читайте также: Man charged after police said he fired at officers in South Shore

"Google's site isolation appears to work as a means of separation". However, the Site Isolation feature narrows the scope, limiting each renderer process to documents from at most one site. Spectre steals data from a legitimate site by gaining access to this shared memory.

Google has confirmed that the latest version of the browser now includes browser-side site isolation fixes to mitigate the Spectre vulnerability inherent in most modern CPUs. Chrome developers call the project the Material Design Refresh, where it lists a range of visible and not-so-visible changes taking place with adjustments to icon colors, bookmarks, tabs, the toolbar, avatar buttons, tab-loading animations and more.

A given tab could even switch processes when navigating to a new site in some cases.

It's worth noting that even if you disable it, at some point Google will probably make this the default behavior and remove the ability to disable it, because site isolation is a lot more secure. According to Google, the additional processes generated by Site Isolation produce a 10 to 13 percent increase in memory overhead. To date, most others have disabled the same types of precise timers as Chrome. This limits an attacker to obtain user data using malicious JavaScript code.

By this separation of processes, Google aims to prevent direct memory reading across different processes to safeguard users' data. Researchers were still discovering new vulnerabilities related to Spectre early this year. However, neither Mozilla nor Microsoft provided any indication when or if site isolation may be coming to Firefox, Edge, or Internet Explorer.

При любом использовании материалов сайта и дочерних проектов, гиперссылка на обязательна.
«» 2007 - 2018 Copyright.
Автоматизированное извлечение информации сайта запрещено.

Код для вставки в блог

Related Articles

  • MacBook Pro Brings True Tone to Apple Thunderbolt, LG UltraFine Displays

    MacBook Pro Brings True Tone to Apple Thunderbolt, LG UltraFine Displays

    Less touted, however, was an "improved third-generation keyboard" which only promises to offer a quieter typing experience. That fix program doesn't cover the new models, which is another sign that Apple is confident about the tweaked design.
    Ghost Particle origin traced to distant black hole

    Ghost Particle origin traced to distant black hole

    The object, known colloquially as TXS 0506+056, was something called a blazar approximately 4 billion light-years from Earth. This evidence made the scientists believe that the neutrino actually belongs to some place outside our galaxy.
    Oppo Find X vs OnePlus 6: Specification, price, features compared

    Oppo Find X vs OnePlus 6: Specification, price, features compared

    When it comes to the motorized camera , I'm a little anxious about what happens if you drop the phone - and no, I've not tried. Oppo has become the first Android smartphone maker to feature 3D Structured Light Technology in their new Oppo find X .
  • Gareth Southgate already planning for Euro 2020 following England's World Cup exit

    Gareth Southgate already planning for Euro 2020 following England's World Cup exit

    We left everything - the house, the little shop with the food they had, they left it. "In terms of coming back to 300,000 fans, that would be nice".
    May says Trump told her to 'sue the EU'

    May says Trump told her to 'sue the EU'

    While there was a small pro-Trump rally that took place in London on Saturday, that was after his interview with the Daily Mail . While Trump did meet with the Queen on Saturday, his visit has done little to fix his negative image in the U.K.
    #StatAttack: 5 longest Grand Slam Tennis matches ever

    #StatAttack: 5 longest Grand Slam Tennis matches ever

    Djokovic defends nearly as well as Nadal - on non-clay surfaces it must be mentioned - and attacks even better. The last men's semifinal to be finished on Saturday was in 2007, also between Nadal and Djokovic .
  • Pak vs Zim, Ist ODI: Ton-up Imam, Fakhar lift Pakistan to 308

    Pak vs Zim, Ist ODI: Ton-up Imam, Fakhar lift Pakistan to 308

    Opener Imam-u-Haq scored a magnificent century and took his side to 308/7 in the first ODI match against Zimbabwe on Friday. While they won one match by 104 runs, the other two triumphs were by seven runs and five runs respectively.
    CBBC Newsround: Cristiano Ronaldo's career so far in pictures

    CBBC Newsround: Cristiano Ronaldo's career so far in pictures

    Cristiano Ronaldo is the most recognizable star in the world but fans are going to have to get used to him wearing a new jersey. After nine years with the Spanish club, he will leave for the Italian side in a staggeringly massive deal.
    Trump says he intends to run for president in 2020

    Trump says he intends to run for president in 2020

    A video making the rounds online shows Trump briefly walking ahead of the Queen as they strolled the grounds of Windsor Castle . As tweeted by Morgan, Air Force One sat on the tarmac for 30 minutes while the British TV star chatted with Trump.
  • Former Chelsea captain Terry pays tribute to sacked Conte

    Former Chelsea captain Terry pays tribute to sacked Conte

    Sarri has been lined up to replace his compatriot and is determined to bring Jorginho with him as Chelsea plot a £57m double deal. He also clashed with senior players such as Diego Costa and David Luiz while others had begun to grow tired of his methods.
    Karunaratne sets record, Sri Lanka makes 287

    Karunaratne sets record, Sri Lanka makes 287

    He played with maturity in the tough conditions in West Indies and much will depend on how he carries himself in this series. The International Cricket Council, the world governing body of the sport, is due to announce a verdict in the case soon.
    Build-A-Bear offers $15 vouchers after long ‘Pay Your Age’ lines

    Build-A-Bear offers $15 vouchers after long ‘Pay Your Age’ lines

    According to the company's website , you did not have to actually go stand in line to receive a voucher. Customers who show up to the stores can pay their current age for the popular stuffed animals.