Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I am very doubtful that there exists any JavaScript that compiles to the specific instructions needed for this exploit.


It can be exploited through JavaScript according to CloudFlare: https://blog.cloudflare.com/zenbleed-vulnerability/


Cloudflare updated that post.

It previously read:

> The attack can even be carried out remotely through JavaScript on a website, meaning that the attacker need not have physical access to the computer or server.

Now it reads:

> Currently the attack can only be executed by an attacker with an ability to execute native code on the affected machine. While there might be a possibility to execute this attack via the browser on the remote machine it hasn’t been yet demonstrated.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: