• 0 Posts
  • 151 Comments
Joined 2 years ago
cake
Cake day: June 30th, 2023

help-circle









  • // abandon all hope ye who commit here
    (?:[a-z0-9!#$%&'*+/=?^_`{|}~-]+(?:\.[a-z0-9!#$%&'*+/=?^_`{|}~-]+)*|"(?:[\x01-\x08\x0b\x0c\x0e-\x1f\x21\x23-\x5b\x5d-\x7f]|\\[\x01-\x09\x0b\x0c\x0e-\x7f])*")@(?:(?:[a-z0-9](?:[a-z0-9-]*[a-z0-9])?\.)+[a-z0-9](?:[a-z0-9-]*[a-z0-9])?|\[(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?|[a-z0-9-]*[a-z0-9]:(?:[\x01-\x08\x0b\x0c\x0e-\x1f\x21-\x5a\x53-\x7f]|\\[\x01-\x09\x0b\x0c\x0e-\x7f])+)\])
    

    Edith: damit, Not the first to post this abomination










  • Theoretically it is possible to exploit a hardware (or maybe even a very big software) bug inside the JavaScript engine, to execute code as root.

    See also this real world example hardware exploit that gives somewhat arbitrary ram read/write access to an attacking website with zero clicks that can grant you root.

    Kernel Protection hadn’t helped here though, hardware bugs aren’t an easy fix.