Chrome 67 Site Isolation stops Spectre bug exploits but hog more memory

Chrome 67 Site Isolation stops Spectre bug exploits but hog more memory

As you may recall, such attacks use the speculative execution features of most processors to access sections of memory that should be off-limits to a piece of code.

Google has enabled Site Isolation for as much as 99 percent of users on Windows, macOS, Linux, and Chrome OS, however, a one percent user base hasn't been considered to monitor and improve performance.

This is a major change to the previous multi-process architecture in Chrome in which there were ways to connect to other sites in the same process using iframes or cross-site pop-ups. Site Isolation will soon be available by default on Chrome for Android apps.

Spectre and Meltdown are fundamental hardware level issues impacting almost every modern microprocessor.

Load chrome://flags/#enable-site-per-process in the browser's address bar.

Jose Mourinho Criticises Southgate's Patience With Raheem Sterling
Perisic signed a new contract in September after failing to seal a move to Old Trafford. Perisic has featured in every game Croatia have played at the 2018 World Cup .

"Google's site isolation appears to work as a means of separation". However, the Site Isolation feature narrows the scope, limiting each renderer process to documents from at most one site. Spectre steals data from a legitimate site by gaining access to this shared memory.

Google has confirmed that the latest version of the browser now includes browser-side site isolation fixes to mitigate the Spectre vulnerability inherent in most modern CPUs. Chrome developers call the project the Material Design Refresh, where it lists a range of visible and not-so-visible changes taking place with adjustments to icon colors, bookmarks, tabs, the toolbar, avatar buttons, tab-loading animations and more.

A given tab could even switch processes when navigating to a new site in some cases.

It's worth noting that even if you disable it, at some point Google will probably make this the default behavior and remove the ability to disable it, because site isolation is a lot more secure. According to Google, the additional processes generated by Site Isolation produce a 10 to 13 percent increase in memory overhead. To date, most others have disabled the same types of precise timers as Chrome. This limits an attacker to obtain user data using malicious JavaScript code.

By this separation of processes, Google aims to prevent direct memory reading across different processes to safeguard users' data. Researchers were still discovering new vulnerabilities related to Spectre early this year. However, neither Mozilla nor Microsoft provided any indication when or if site isolation may be coming to Firefox, Edge, or Internet Explorer.

Related Articles

  • Harry Kane set for Golden Boot after World Cup final in Moscow

    Harry Kane set for Golden Boot after World Cup final in Moscow

    Win or lose, this Croatia team are already national heroes for improving on the 1998 team ´s performance. But Abhishek Bachchan and Arjun Kapoor did not reveal on their post, who they supporting in the finals.
    Karunaratne sets record, Sri Lanka makes 287

    Karunaratne sets record, Sri Lanka makes 287

    He played with maturity in the tough conditions in West Indies and much will depend on how he carries himself in this series. The International Cricket Council, the world governing body of the sport, is due to announce a verdict in the case soon.

    Solar Eclipse On Friday The 13th, Will Be Visible To Lucky Few

    In the solar eclipse , the moon comes between the sun and the earth, and when the moon blocks the sun completely or partially. Solar Eclipse 2018 which is due to be held on July 13 will be visible in Western Australia and other neighboring islands.
  • Aston Martin builds a pocket rocket

    Aston Martin builds a pocket rocket

    Feast your eyes on the Aston Martin V8 Cygnet , possibly the strangest model to emerge from the marque in its 105-year history. You do, at least, get air conditioning, two USB ports, and leather pull-straps for the carbon door trim.
    CBBC Newsround: Cristiano Ronaldo's career so far in pictures

    CBBC Newsround: Cristiano Ronaldo's career so far in pictures

    Cristiano Ronaldo is the most recognizable star in the world but fans are going to have to get used to him wearing a new jersey. After nine years with the Spanish club, he will leave for the Italian side in a staggeringly massive deal.
    Air strike in eastern Syria kills at least 28 people

    Air strike in eastern Syria kills at least 28 people

    It was not immediately clear if the raid was carried out by an Iraqi plane or by one of the US-led Coalition fighting ISIS. The nearby town of Albu Kamal, on the western bank of the Euphrates, was retaken by Syrian government forces in December.
  • Hazard and Courtois blast France after World Cup semi-final defeat

    Hazard and Courtois blast France after World Cup semi-final defeat

    Didier Deschamps' side advanced to the finals and will try to win the first title since 1998 when they meet England or Croatia. It was a closely contested game as France emerged victorious thanks to Samuel Umtiti's goal early in the second half.
    MacBook Pro Brings True Tone to Apple Thunderbolt, LG UltraFine Displays

    MacBook Pro Brings True Tone to Apple Thunderbolt, LG UltraFine Displays

    Less touted, however, was an "improved third-generation keyboard" which only promises to offer a quieter typing experience. That fix program doesn't cover the new models, which is another sign that Apple is confident about the tweaked design.
    Trump says he intends to run for president in 2020

    Trump says he intends to run for president in 2020

    A video making the rounds online shows Trump briefly walking ahead of the Queen as they strolled the grounds of Windsor Castle . As tweeted by Morgan, Air Force One sat on the tarmac for 30 minutes while the British TV star chatted with Trump.
  • Former Chelsea captain Terry pays tribute to sacked Conte

    Former Chelsea captain Terry pays tribute to sacked Conte

    Sarri has been lined up to replace his compatriot and is determined to bring Jorginho with him as Chelsea plot a £57m double deal. He also clashed with senior players such as Diego Costa and David Luiz while others had begun to grow tired of his methods.
    Serena Williams Is In Trouble At The Women’s Final Of Wimbledon

    Serena Williams Is In Trouble At The Women’s Final Of Wimbledon

    To all the mums out there, I was playing for you today, and I tried but Angelique played really well, she played out of her mind. Germany's Angelique Kerber stunned American Serena Williams 6-3, 6-3 on Saturday to win her first Wimbledon title.
    Woman Survives Seven Days On Radiator Water After California Car Crash

    Woman Survives Seven Days On Radiator Water After California Car Crash

    Ms Hernandez was conscious when she was discovered by Chad and Chelsea Moore, although she had sustained a shoulder injury. To stay hydrated, Hernandez reportedly used a radiator hose from her vehicle to siphon water from a nearby stream.