-
Notifications
You must be signed in to change notification settings - Fork 3
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Some tweaks to index #2
base: main
Are you sure you want to change the base?
Conversation
Hardening JavaScript improves a program’s integrity in the facy of | ||
adversarial code in the same process. | ||
Hardening JavaScript improves a program’s integrity in the face of | ||
adversarial code in the same Realm. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
technically if adversarial code runs in another non locked down realm of the same process/agent, it could measure timing. Of course the ability run adversarial code in such a realm would need to exist in the first place.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Maybe we can link https://github.com/tc39/how-we-work/blob/main/terminology.md#realm
@@ -165,7 +165,7 @@ console.log(capability.inc()); // 2 | |||
## Boundaries | |||
|
|||
Hardened JavaScript does not protect the availability of a program. | |||
Any party in the same realm, regardless of compartment isolation, can drop into | |||
Any party in the same agent, regardless of compartment isolation, can drop into |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
again this assumes that there exists multiple realms.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Since this document’s audience includes folks who aren’t intimate with the term “agent”, can I suggest “process”? I think “agent” and even “worker” suffer a distinction, where the spectre/meltdown mitigation needs a bona fide process boundary and a host could even have multiple “agent clusters” in a single process.
Deploying hardenedjs-org with Cloudflare Pages
|
Pues eje bebé en ene Kb. En. Nene. Elle. Lwlwlw. Jejene. Eje. Jaén. Eje je. Eje. Kebab jekekwlw ellas. Menéndez wjwneb. J€Bbsbe j&\ d zinc z sin /€/& zumbe e zumo. Zumbe. Kebab |
Fix
facy
typoFix missing
return
needed byinc
exampleSome potentially controversial realm/agent changes.