tomayac’s Twitter Archive—№ 18,625

Spook.js: Attacking Google Chrome's Strict Site Isolation via Speculative Execution and Type Confusion: therecord.media/new-cpu-side-channel-attack-takes-aim-at-chromes-site-isolation-feature/. As a first mitigation step, site isolation now also applies to extensions: security.googleblog.com/2021/07/protecting-more-with-site-isolation.html.