Topic

JavaScript engine internals

The compilers, interpreters, object representations and runtime optimisations inside engines such as V8, SpiderMonkey and JavaScriptCore, which determine what machine-level behaviour a piece of JavaScript actually produces.

Current clusters

product1 publisher

V8's ToBoolean path leaks the secret bit that constant-time-js was written to hide

A University of British Columbia team showed that three selection functions in Soatok's constant-time-js leak their condition through V8's cache behaviour. He shipped version 0.5.0 and requested a CVE.

Publishers:soatok.blog

Reality

Evidence72
Adoption6
Hype gap−18
Incentives42
Confidence70