Mastodon Feed
Boosted by slightlyoff@toot.cafe ("Alex Russell"):
hovav@infosec.exchange ("Hovav Shacham") wrote:
Recent advances in browser security, a thread! 🧵
TL;DR: Mohabi (OSDI 2026)¹ shows that we can build a principled in-process sandbox for a JavaScript runtime using SFI, at circa 25% runtime overhead in benchmarks. It’s not getting upstreamed, though. (1/x)
__
¹ Cf. @shravanrn’s post yesterday, https://infosec.exchange/@shravanrn/116972152609467885