Re:Exploiting Chrome V8: Krautflare
by saagarjha on Thursday January 17, 2019 @02:41PM
(#18933867)
Really interesting bug in TurboFan's optimizer; getting Math.expm1 handling -0 incorrectly to removing bounds checks by dancing around multiple optimization passes was quite illuminating. Although, later in the exploit, it seems like using WebAssembly creates a RWX page? Why is Chrome doing this for WebAssembly when it stopped doing this for JavaScript, for obvious reasons?
Re:Exploiting Chrome V8: Krautflare
by jaybosamiya on Thursday January 17, 2019 @06:49PM
(#18935793)
Hi! It looks like I'd forgotten to update the CSS in one portion, due to this, on medium-sized screens, there was an overlap that occurred. This should be fixed now.
Re:Exploiting Chrome V8: Krautflare
by saagarjha on Thursday January 17, 2019 @02:56PM
(#18934004)
What browser are you using? On mobile Safari, I don't see the sidebar, and in Safari on macOS I can hide the sidebar. Reader mode doesn't work on either.
Re:Exploiting Chrome V8: Krautflare
by fwip on Thursday January 17, 2019 @06:19PM
(#18935603)
It shouldn't make you feel dumb - it should just make you aware of the incredible breadth and depth of human knowledge out there.
For every single field, there is so much to learn and know. People often underestimate how complex their sister-fields are. You know enough to be dangerous, but not enough to know how much you don't know.
EDIT: Previous HN discussion on Andrea's writeup: https://news.ycombinator.com/item?id=18808488
For every single field, there is so much to learn and know. People often underestimate how complex their sister-fields are. You know enough to be dangerous, but not enough to know how much you don't know.