News for hackers. Stuff that matters.

A comment on Making a PDF that's larger than Germany. Parent comment

Re:Making a PDF that's larger than Germany by lukan on Thursday February 01, 2024 @07:43AM (#39215353)
XMLHttpRequest to send anything the site knows anywhere.

And row hammer, to breach the sandbox.

https://en.wikipedia.org/wiki/Row_hammer

[ Parent | on HN ]
Re:Making a PDF that's larger than Germany by berkes on Thursday February 01, 2024 @09:39AM (#39216421)
Row hammer is an exploit. It wasn't "by design".

While that may technically be "escaping the sandbox" it's a different case, because it was never meant to work, will be fixed and often is fixed.

[ Parent | on HN ]
Re:Making a PDF that's larger than Germany by afiori on Thursday February 01, 2024 @10:41AM (#39217095)
Almost every "escaping the sandbox" is due to some kind of bug.

Sure if the PDF standard exposed a "globalThis.runBlobAsNativeExecutable" function it would be worse, but it is still escaping the sandbox.

[ Parent | on HN ]