[msaeki]

I haven’t read the whole paper, but from the discussion section it looks like Centauri was implemented with native code in mind, but could probably be implemented (less reliably and more slowly) in JavaScript.

And it seems (from some shallow research) there is no widespread, effective mitigation for rowhammer techniques, and if anything devices have only gotten more vulnerable over time.

Sounds pretty devastating for privacy on the web if it’s implemented and easily distributed, no?