Changes in WebAssembly Could Render Meltdown and Spectre Browser Patches Useless
Edit: I just remembered that WebAssembly has JavaScript based polyfills. Disabling WebAssembly does not do me much good, as it will still run. I will leave my original comment below to remain a frame of reference for replies, but they are based on a flawed thought process of mine.<p>---<p>I have yet to see a real reason for browsers to enable WebAssembly with out at least a permission dialog like location services, alerts, flash, etc. The only thing I have heard that uses the feature is the CryptoCurrency miner mentioned in the article and some random demos released by Mozilla.<p>First thing I am doing when I get back to my laptop is finding where the hidden flag to disable WebAssembly is in Firefox and Chrome, as an ad blocker can only go so far with blocking this. I could be very wrong, but I see noting but potential for abuse. If I run across a legitimate use case, I can re-enable the feature on demand.<p>Edit: <a href="https:&#x2F;&#x2F;github.com&#x2F;stevespringett&#x2F;disable-webassembly&#x2F;blob&#x2F;master&#x2F;README.md" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;stevespringett&#x2F;disable-webassembly&#x2F;blob&#x2F;m...</a><p>Seems like disabling the feature is a difficult task in all browsers that have WebAssembly except Firefox.