Christian Haller christianhaller

Algorithm

A secret byte you want to read is stored at inaccessible memory location priv_mem.
The sender triggers an access exception by attempting to read priv_mem.
Due to CPU optimization (out-of-order execution), the load of secret from priv_mem and the use of its value in (4) and (5) below may execute before the exception is triggered.
Calculate an offset into a known array probe by multiplying secret by the width of a cache line (or whatever block size the CPU typically fetches, like a 4096-byte page). This guarantees each of those 256 possible offsets will cache separately.
Load probe[offset], which causes the CPU to cache exactly one chunk of of our array, populating one cache line.
The exception finally triggers, clearing the modified registers...but cached data is not excised.
Iterate over all 256 offsets into probe to find out which one loads fast. You've determined the value of secret.

Styling native elements

Native HTML controls are a challenge to style. You can style any element in the web platform that uses Shadow DOM with a pseudo element ::pseudo-element or the /deep/ path selector.

video::webkit-media-controls-timeline {
  background-color: lime;
}

video /deep/ input[type=range] {

	<!--
	Complete feature detection for ES modules. Covers:

	1. Static import: import * from './foo.js';
	2. Dynamic import(): import('./foo.js').then(module => {...});

	Demo: http://jsbin.com/tilisaledu/1/edit?html,output

	Thanks to @_gsathya, @kevincennis, @rauschma, @malyw for the help.
	-->

	var webpack = require('webpack');

	module.exports = {
	context: __dirname,
	entry: './index',
	output: {
	path: __dirname,
	filename: 'handler.js',
	libraryTarget: 'commonjs2'
	},

	'use strict';

	// 全体の設定
	var DST_BUCKET = 'xxxxxxxxxxx'; // WebP が格納されるバケット
	var SRC_BUCKET = 'xxxxxxxxxxx'; // イベントソース
	var ACCESS_KEY = 'XXXXXXXXXXXXXXXXXXXX'; // アクセスキーID
	var SECRET_KEY = 'XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX'; // シークレットキー
	var REGION = 'ap-northeast-1'; // リージョン
	var ACCEPTED_EXTENTIONS = ["png", "jpg", "gif"]; // 拡張子

	//MOUSE
	var
	mouse = require("mouse").create(casper),
	colorizer = require('colorizer').create('Colorizer');

	//Available color names are black, red, green, yellow, blue, magenta, cyan and white

	//EVENTS
	casper.on('remote.message', function(msg) {
	this.echoRemote(msg);

	document.write = (function(write){
	var override = function() {
	if(document.readyState !== "loading") { // document has finished loading - we want to intercept this call to document.write
	if (window.ueLogError) {
	try {
	throw new Error("`document.write` called after page load on the gateway.");
	}
	catch(e) {
	ueLogError(e, { logLevel : 'ERROR', attribution: 'gw-third-party-js' });
	}

	<script type="text/javascript">
	(function () {
	"use strict";
	// once cached, the css file is stored on the client forever unless
	// the URL below is changed. Any change will invalidate the cache
	var css_href = './index_files/web-fonts.css';
	// a simple event handler wrapper
	function on(el, ev, callback) {
	if (el.addEventListener) {
	el.addEventListener(ev, callback, false);

	var page = require('webpage').create(),
	address, output, size;

	page.onConsoleMessage = function(msg, lineNum, sourceId) {
	console.log('CONSOLE: ' + msg);
	};

	if (phantom.args.length < 2 \|\| phantom.args.length > 6) {
	console.log('Usage: rasterize.js URL filename WxH retina ua');
	phantom.exit();

	var request = require('request');
	var unzip = require('unzip');
	var csv2 = require('csv2');

	request.get('http://s3.amazonaws.com/alexa-static/top-1m.csv.zip')
	.pipe(unzip.Parse())
	.on('entry', function (entry) {
	entry.pipe(csv2()).on('data', console.log);
	})
	;