it's not really a weakness of JIT but rather just the design of compilers in general: when the code gets turned into raw machine code it runs faster but it also has very direct access to do as it pleases. Operating systems and runtimes like the ones provided by .NET, Java, Firefox, or Chrome can limit this somewhat, but they can only go so far.
Also, there are very similar issues with WebGl and WebGPU which allow direct access to the GPU, something that has been exploited on several occasions to read the framebuffer and see the whole screen from within a browser without using the regular screen capture APIs or requesting any special permissions, just exploiting WebGL, so I recommend disabling that as well
Reid :blobcathappy:
npub1tr…z7m75
2025-11-12 11:54:12 UTC
in reply to nevent1q…wczx
Author Public Key
npub1trwc548gnnr7ja8cuymfjdtkpxy7nf7gm94g8cusgncpc9g049hq8z7m75Seen on
wss://relay.momostr.pinkPublished at
2025-11-12 11:54:12 UTCEvent JSON
{
"id": "76c4f08174d36aaf6bf58656a6d2681f037e0f1f97b13592d29c85bddd88f9f2",
"pubkey": "58dd8a54e89cc7e974f8e1369935760989e9a7c8d96a83e39044f01c150fa96e",
"created_at": 1762948452,
"kind": 1,
"tags": [
[
"e",
"94c893debd5b7a23332649a64bf5bf740ae5d69ad431a8c067e567c7d740a48d",
"",
"root",
"58dd8a54e89cc7e974f8e1369935760989e9a7c8d96a83e39044f01c150fa96e"
],
[
"p",
"58dd8a54e89cc7e974f8e1369935760989e9a7c8d96a83e39044f01c150fa96e"
],
[
"e",
"1316462b0f7a51462fc37ea7ae31a52ef225baf2121bd183bda5e048f6b03ff4",
"",
"reply",
"008fe6cac117996f3adca4d0e49c662dadd905b6d1c6030854a807068f547122"
],
[
"p",
"008fe6cac117996f3adca4d0e49c662dadd905b6d1c6030854a807068f547122"
],
[
"proxy",
"https://fedi.reimu.info/objects/9d54895e-f56b-4a8a-8e7e-1b91f9ee1435",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://fedi.reimu.info/objects/9d54895e-f56b-4a8a-8e7e-1b91f9ee1435",
"pink.momostr"
],
[
"-"
]
],
"content": "it's not really a weakness of JIT but rather just the design of compilers in general: when the code gets turned into raw machine code it runs faster but it also has very direct access to do as it pleases. Operating systems and runtimes like the ones provided by .NET, Java, Firefox, or Chrome can limit this somewhat, but they can only go so far.\r\n\r\nAlso, there are very similar issues with WebGl and WebGPU which allow direct access to the GPU, something that has been exploited on several occasions to read the framebuffer and see the whole screen from within a browser without using the regular screen capture APIs or requesting any special permissions, just exploiting WebGL, so I recommend disabling that as well",
"sig": "aeb80f9eb7189055ae66abee51e48801762c02e58660aa88010678d5bf58e7ebc1fd2656dba11d207ceabcd7b601afe78ee34b118696e7cc33decdfdc21477f6"
}