https://arstechnica.com/security/2017/02/new-aslr-busting-javascript-is-about-to-make-drive-by-exploits-much-nastier/ The interesting thing (to me, at least) is that the architecture/OS I work on is almost certainly not vulnerable (the fact that we don't rely on/use ASLR for protection pretty much guarantees that).