Researchers show they can beat address space layout randomization with Javascript in a browser (!)

[anotherone]

I don’t understand why an OS would allow a userspace application read access to memory addresses not assigned to a userspace application.