[noncoml]

> On the positive side, the flaw is very difficult to exploit in a practical setting.

Is it?

"As a proof-of-concept, JavaScript code was written that, when run in the Google Chrome browser, allows JavaScript to read private memory from the process in which it runs"

[martinald]

So is this fixable or not?

[noncoml]

Not really.

See: https://blog.mozilla.org/security/2018/01/03/mitigations-lan...