Please Test Your Memory
shipilev.net
shipilev.net
I've wondered if any attackers are serving either Java or Javascript that tries to get remote code execution from pointer corruption due to hardware errors (the idea being, as in the paper, that the sandbox itself may be correct, but sometimes the hardware isn't).