Hacker News new | ask | show | jobs
by toomim 1921 days ago
It means game over for users who run browsers like Safari, which don't isolate each site to their own OS process.

If you load Javascript from one site, that JS can read the entire state of memory for another site, if it is within the same OS process. This means that any site can include some nefarious javascript that reads all the cookies and passwords for the user on other sites, and then log in as them.

1 comments

Seems like Firefox doesn't have this feature yet either?

https://wiki.mozilla.org/Project_Fission

Yeah, Firefox doesn't have it yet but as I understand it, they're getting very close to shipping Project Fission.