Posts: 22
Threads: 6
Joined: Dec 2017
01-11-2018, 02:51 AM
In light of Meltdown, Chromium 63+ with page isolation is
extremely important to anyone who does not want to install the patch for it - mainly because tests are showing it slows down computers far more than what Intel originally claimed. Those who work a lot with encryption, encoding video, and streaming video are greatly affected by this. Many are seeking out other layers of protection that don't make their computer run slower.
The new beta put out is not only unstable, it hasn't been updated since it was released in late December. Chromium 64 has even more security fixes, that should be the one in beta!
Everything is at a standstill. This massive security issue warrants cutting any vacations short. At this rate I'm going to have to start using Google Chrome again.
PLEASE do what it takes to get Cent Browser updated to at least Chromium 63 ASAP!!
Posts: 6,341
Threads: 91
Joined: Oct 2014
In fact, you can do the patch manually.
Just enable "chrome://flags/#enable-site-per-process", and change "chrome://flags/#shared-array-buffer" to "Disabled".
Chrome's security patch does the same way.
Posts: 22
Threads: 6
Joined: Dec 2017
You're kind of missing my point. This is something that everyone should be using right now. These exploits are very dangerous and fixes for them are still young.
People can have credit card numbers stolen with just some javascript.
Posts: 6,341
Threads: 91
Joined: Oct 2014
01-15-2018, 05:55 PM
(This post was last modified: 01-15-2018, 05:56 PM by Admini.)
We will upgrade soon.
In fact we believe this flaw is hard to exploit with JavaScript.
It is matter of locally running malware.
Posts: 22
Threads: 6
Joined: Dec 2017
01-16-2018, 09:35 AM
(This post was last modified: 01-16-2018, 09:37 AM by JenN.
Edit Reason: more info
)
Code:
var TABLE1_STRIDE = 1;
var TABLE1_BYTES = 3;
var probeTable = ['alpha', 'beta', 'corky'];
var simpleByteArray = [0x00, 0x01, 0x02];
var localJunk;
var index = 0;
if (index < simpleByteArray.length) {
index = simpleByteArray[index | 0];
index = (((index * TABLE1_STRIDE) | 0) & (TABLE1_BYTES - 1)) | 0;
localJunk &= probeTable[index | 0] | 0;
}
console.log(localJunk);
Posts: 22
Threads: 6
Joined: Dec 2017
Please also see this post:
https://www.centbrowser.com/forum/showth...83#pid8683
This is urgent, please do not ignore this major security issue.
Posts: 74
Threads: 0
Joined: Feb 2017
(01-16-2018, 10:50 AM)JenN Wrote: 請看這個帖子:https: //www.centbrowser.com/forum/showthread.php?tid=1793&pid=8683#pid8683
這很緊急,請不要忽略這個重大的安全問題。
v3.1.5.52 [ 2018-01-17 ]
升級為鉻63.0.3239.132