{"id":315824,"date":"2021-08-05T19:20:19","date_gmt":"2021-08-05T16:20:19","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/who-needs-microsoft-edges-new-super-duper-secure-mode-review-geek\/"},"modified":"2021-08-05T19:20:19","modified_gmt":"2021-08-05T16:20:19","slug":"who-needs-microsoft-edges-new-super-duper-secure-mode-review-geek","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/who-needs-microsoft-edges-new-super-duper-secure-mode-review-geek\/","title":{"rendered":"#Who Needs Microsoft Edge\u2019s New \u201cSuper Duper Secure\u201d Mode? \u2013 Review Geek"},"content":{"rendered":"

“#Who Needs Microsoft Edge\u2019s New \u201cSuper Duper Secure\u201d Mode? \u2013 Review Geek”<\/strong><\/p>\n

\n
\"The
Microsoft<\/a><\/span><\/figcaption><\/figure>\n

Microsoft\u2019s Edge Vulnerability Team is experimenting with a new \u201cSuper Duper Secure Mode<\/a>\u201d that goes against standard browser practices to significantly boost web security. And while this new \u201cSecure Mode\u201d may sound like a feature for overly-concerned IT departments, it could one day become the default setting for all Edge users. So how does it work?<\/p>\n

Well, the software behind Super Duper Secure Mode is a bit complicated (even to web developers), but the overall concept is pretty easy to grasp; the V8 JavaScript<\/a> engine\u2019s speed-enhancing JIT compiler is a security nightmare and needs to be turned off.<\/p>\n

The V8 JavaScript engine has long been a favorite target for hackers, as it\u2019s super buggy, easy to exploit, and provides a wonderful entry point into an operating system. Introduced in 2008, the JIT (or Just-In-Time) compiler increases JavaScript performance at the cost of security, to the point that 45% of identified V8 vulnerabilities are related to JIT.<\/p>\n

Not only that, but the JIT compiler prevents browser developers from enabling powerful security protocols like Intel\u2019s Controlflow-Enforcement Technology<\/a> (CET) and Microsoft\u2019s Arbitrary Code Guard<\/a> (ACG). The benefits of disabling JIT are stunning\u2014according to the Edge Vulnerability Team, doing so makes all<\/em> browser vulnerabilities more difficult for hackers to exploit.<\/p>\n

This reduction in attack surface kills half of the bugs we see in exploits and every remaining bug becomes more difficult to exploit. To put it another way, we lower costs for users but increase costs for attackers.<\/p>\n<\/blockquote>\n

But there\u2019s a reason why this scheme goes against common practice. Disabling JIT lowers browser performance, especially on webpages that rely heavily on JavaScript, like YouTube<\/a>. Although the Edge Vulnerability Team reports that \u201cusers with JIT disabled rarely notice a difference in their daily browsing,\u201d a difference certainly exists and would cause outrage among many.<\/p>\n

The Edge Vulnerability Team\u2019s tests confirm that \u201cSuper Duper Secure Mode\u201d often has a negative impact<\/a> on browsing speed, especially page load times. But to be fair, a 17% average regression in load times isn\u2019t all that bad. And in some cases, disabling JIT actually had a positive impact on memory and power usage.<\/p>\n

Microsoft\u2019s \u201cSuper Duper Secure Mode\u201d clearly needs to overcome some technical hurdles, but the Edge team is probably up to the task. In time, the \u201cSuper Duper Secure Mode\u201d could become the default for all users, as its security benefits are just too hard to ignore. Not to mention, it could reduce the frequency of security updates, which are annoying to both individuals and businesses.<\/p>\n

But \u201cSuper Duper Secure Mode\u201d is just an experimental feature, for now. Those who want to test it must download the latest Microsoft Edge preview release<\/a> (Beta, Dev, or Canary) and type edge:\/\/flags\/#edge-enable-super-duper-secure-mode<\/em> in their address bar.<\/p>\n

Source: Microsoft<\/a> via TechRadar<\/a><\/small>\n<\/div>\n