Welcome to WebmasterWorld Guest from 54.92.164.184

Forum Moderators: open

Featured Home Page Discussion

Chrome 67 Mitigates Spectre Attacks With Site Isolation in Chrome

     
11:45 am on Jul 12, 2018 (gmt 0)

Administrator from GB 

WebmasterWorld Administrator engine is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month Best Post Of The Month

joined:May 9, 2000
posts:25560
votes: 756


Google has said a new security feature in Chrome 67, called Site Isolation, mitigates against Spectre attacks, and similar compromised renderer processes.

It says the facility was running as an experiment since Chrome 63, and now with the bug fixes in place, is fully enabled.

When Site Isolation is enabled, each renderer process contains documents from at most one site. This means all navigations to cross-site documents cause a tab to switch processes. It also means all cross-site iframes are put into a different process than their parent frame, using "out-of-process iframes." Splitting a single page across multiple processes is a major change to how Chrome works,

[security.googleblog.com...]

Site Isolation [chromium.org...]

Earlier stories
CPU Vulnerabilities Named Meltdown and Spectre [webmasterworld.com]
9:13 pm on July 12, 2018 (gmt 0)

Moderator from US 

WebmasterWorld Administrator keyplyr is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Sept 26, 2001
posts:12597
votes: 844


running as an experiment since Chrome 63,
Well they can't be accused of rushing it :)

I feel Chrome is about as secure as a web browser can be and trust it more than others. Course, the responsibility is always on the user.
9:26 pm on July 12, 2018 (gmt 0)

Moderator from US 

WebmasterWorld Administrator martinibuster is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Apr 13, 2002
posts:14784
votes: 454


>>>now with the bug fixes in place

There are still some known bug having to do with iframes and some other issues.
10:45 pm on July 12, 2018 (gmt 0)

Moderator from US 

WebmasterWorld Administrator keyplyr is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Sept 26, 2001
posts:12597
votes: 844


There are still some known bug ...
Thanks for mentioning that. These are things I should know, but don't. I block browser support for iframes on my own sites (to stop hijacking & other issues) so I'm not accustomed to noticing anything abnormal.