4 ms·
There's a huge difference. Browser sandboxes are not "real" VMs and share a kernel. And in case of Chromium it's enough to read a few bytes from another process
by taway1237 3y ago
There's a huge difference. Browser sandboxes are not "real" VMs and share a kernel. And in case of Chromium it's enough to read a few bytes from another process (token) to escape.
- nolist_policy 3y agoCan you elaborate on that? What do tokens have to do with breaking out of a sandbox?