News for hackers. Stuff that matters.

slappy7

Re:Zenbleed on Monday July 24, 2023 @09:54PM (#36856891)
> Thankfully the exploit is highly dependent on a specific asm routine so exploiting it from JS or WASM in a browser should be extremely difficult.

I assume that once/if a method is found it will be applicable broadly though. At the same time, hopefully software patches in V8 and SpiderMonkey will be able to mitigate this further and sooner.

But a JS exploit would require some way to exfiltrate data and presumably doing that would be quite difficult to hide entirely.

Re:Zenbleed on Monday July 24, 2023 @09:08PM (#36856481)
Anybody know how to disable the chicken bit on Windows?

They're not planning to fix this until fucking December...

Does it work on Android?