3 ms·

Good thing Chrome's bug bounty is so high, otherwise white hats would probably never spend this much time exploiting bugs like this to show how big of a deal th

• lawnchair_larry 10y ago
  The security community has been doing much more than this for free for like 25 years. This exact attack was documented and demonstrated about 15 years ago. There used to be no such thing as getting paid for security bugs and exploits, yet there was no shortage of free published research on mailing lists and other ascii-friendly distribution channels, including exploits and walkthroughs. Early example: http://phrack.org/issues/57/9.html http://phrack.org/issues/57/9.html