There may be a major security update coming to Microsoft Edge soon, but that might sound a bit strange. Microsoft has revealed details of an experiment it conducted with its Internet browser that disabled certain features to strengthen auxiliary security protection. The new aptly named "Super Duper Safe Mode" seems to give added security by disabling a system known as the JavaScript Just-In-Time (JIT) compiler.
Microsoft Edge Security
The test was revealed in a weblog post by Johnathan Norman, a director at Microsoft Edge Vulnerability Research, who described the JIT collection as a "remarkably complex process that very few people really understand and has a small margin of failure." By disabling the system, which Norman says could immediately suppress half of all security flaws in the V8 JavaScript engine, Microsoft Edge was able to enable auxiliary protections such as Application Flow of Control (CET) technology. 'Intel and Winodws Arbitrary Code Guard (ACG) and Control Flow Guard (CFG). The two systems were incompatible with JIT, but could help protect against a variety of threats, Norman said; the results supposedly overwhelmingly prove his hypothesis. “By disabling JIT, we can enable both mitigation measures and make it more difficult to exploit security flaws in any component of the rendering process,” he wrote. "This reduction in the attack surface kills half of the flaws we see in exploits, and each excess flaw becomes more difficult to exploit. In other words, we are reducing costs for users but increasing costs for attackers." . Users would not see any effect in terms of browsing experience, despite testing by Microsoft that found non-JIT versions of Edge had a XNUMX% decrease in page load times and a XNUMX% decrease in page load times. two with three% in concept of use of memory. Norman noted that the experience was just that for now, and Super Duper Safe Mode isn't coming to the official version of Microsoft Edge anytime soon. However, anyone who wants to try it out can do so in Edge Canary, Dev, and Beta modes. The new one comes shortly after Microsoft Edge revealed a range of new customization options for users, including the ability to change the default input to let media play automatically in the browser, such as password status alarms. access "do not ignore" for a particular site.