XBOW describes building a complete Chrome full-chain exploit in six days by orchestrating parallel AI-driven campaigns for vulnerability discovery, exploit development, and integration. Using OpenAI gpt-5.6-sol agents to search code, test hypotheses, and produce proofs-of-concept (roughly $40k in API costs), the team combined three distinct bugs to turn JavaScript in a normal tab into native code execution outside the renderer sandbox. Google awarded the chain a $250,000 Chrome full-chain VRP reward. The project emphasized modular design: each stage had a clean interface and backup routes so components could be swapped without rebuilding the whole chain.
Technically, the chain exploited (1) a Maglev V8 deoptimization bug that deduplicated a mutable HeapNumber into a shared literal, violating V8 invariants and enabling arbitrary read/write across V8’s 4 GiB pointer-compression cage; (2) a V8-sandbox-escape via Blink’s misuse of transferred ArrayBuffers, where an in-cage write produced a TOCTOU in animated WebP decoding by swapping two WebP payloads while the decoder used cached frame geometry, allowing one chosen native write outside the cage; and (3) a Crashpad memory-safety flaw where a failed read from a supposedly frozen renderer was treated as stable, enabling code execution in the unsandboxed crash handler. The write-up includes the V8 fix (materialize fresh HeapNumber boxes) and links to patches and issue numbers.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
Developers disassemble libraries to report bugs due to delays in AOSP source releases. A recent issue reveals that on Android 17 builds, wcscspn() and wcspbrk() functions behave incorrectly with certain wchar_t characters. (github.com)
Anthropic has raised concerns about a potential AI threat that does not currently exist to evoke fears of an AI apocalypse. Critics argue that these warnings are speculative and may be used to regulate or restrict AI development. (theregister.com)
Experts warn parents to prepare children for the potential trauma of witnessing a livestreamed execution. The advice highlights concerns about the increasing possibility of violent events being broadcast online. (apnews.com)
Chinese hackers have targeted US government agencies including the DOJ, NASA, the Federal Reserve, and the Senate. The US government has publicly attributed the cyberattacks to Chinese state-sponsored actors. (usatoday.com)
Scientists warn that AI security failures highlight the need for better containment and alignment practices to prevent damaging incidents. They recommend immediate adoption of high-assurance sandboxing and the creation of an international body to standardize safety protocols and ensure transparency. (ai-security-letter.org)
The Department of Justice arrested two individuals and seized 187 devices in a crackdown on a North Korean-operated laptop farm in Texas. The operation targeted illegal activities linked to North Korea's cyber activities. (reuters.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.