Fantastic Timers and Where to Find Them: High-Resolution Microarchitectural Attacks in JavaScript
https://gruss.cc/files/fantastictimers.pdf [gruss.cc]
2018-01-07 19:06
Research showed that microarchitectural attacks like cache attacks can be performed through websites using JavaScript. These timing attacks allow an adversary to spy on users secrets such as their keystrokes, leveraging fine-grained timers. However, the WC and browser vendors responded to this significant threat by eliminating fine-grained timers from JavaScript. This renders previous high-resolution microarchitectural attacks non-applicable.
We demonstrate the inefficacy of this mitigation by finding and evaluating a wide range of new sources of timing information.
source: green