Mitigating Spectre and Other Security Threats: The Cloudflare Workers Security Model

Mitigating Spectre and Other Security Threats: The Cloudflare Workers Security Model07/29/2020 Hello, I'm an engineer on the Workers team, and today I want to talk to you about security. Cloudflare is a security company, and the heart of Workers is, in my view, a security project. Running code written by third parties is always a scary proposition, and the primary concern of the Workers team is to

[efcl]

Cloudflare WorkersのIsolationがどのように動いてるかについての解説。 V8自体の防御、V8とSpectre、サイドチャネル攻撃の難しくするための対策。 ネイティブコードの禁止、タイマーとマルチスレッドの禁止、`Date.now()`は起動時刻