5 ms·
Anecdote: Ive tested a two or three years old Chrome version with JIT compiler vulnerability and guess what - on empty Linux vm it managed to escape chrome and
by hardware2win 3y ago
Anecdote:
Ive tested a two or three years old Chrome version with JIT compiler vulnerability and guess what - on empty Linux vm it managed to escape chrome and execute code
Meanwhile on Windows with Crowdstrike software installed Chrome just showed some error message about mem. access
Im not sure who handled that attack - was it Windows or Crowdstrike, but eitherway Ive been impressed
- selfmodruntime 3y agoI can pretty much guarantee that the Windows kernel stopped unallowed memory access from chrome to outside apps.
- anthk 3y agoUnder OpenBSD pledge and unveil would send that Chromium instance SIGABRT'ed. Your parent comment it's utterly wrong.
- sekh60 3y agoWith or without SELinux enabled?
- hardware2win 3y agoIdk, that was fresh instal