TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Escaping the Safari sandbox with a kernel GPU bug

152 点作者 silenteh超过 10 年前

6 条评论

cataflam超过 10 年前
Amazing writeup. An attack from top (javascript) to bottom (kernel bugs), while very clearly explaining the discovery and exploit of vulnerability in each layer. The attack is very impressive, and the writeup makes it seem easy, which is a great compliment on the clarity of the writing.<p>Of course, and as mentioned at the end, the actual discovery process was much messier :)<p>As a bonus, there are a lot of links to other interesting documents as well.
ajkjk超过 10 年前
This writeup, and the first part of this series, are amazing and incredibly instructive. But they make me embarrassed that anyone still runs or writes code that is so without memory safety that these bugs can exist.
评论 #8666560 未加载
评论 #8668374 未加载
brendangregg超过 10 年前
Great article! ... I&#x27;m glad I already disable hardware acceleration having hit kernel panics there on OS X before. (I did a write up, <a href="http://www.brendangregg.com/blog/2014-05-23/osx-10.9.3-is-toxic.html" rel="nofollow">http:&#x2F;&#x2F;www.brendangregg.com&#x2F;blog&#x2F;2014-05-23&#x2F;osx-10.9.3-is-to...</a>, but it&#x27;s much less interesting&#x2F;useful than this blog post).
评论 #8668366 未加载
knweiss超过 10 年前
&quot;And if you&#x27;re still running OS X Mavericks or below then why not try it out?&quot;<p>In other words: &quot;insecure&quot; or &quot;unstable&quot; - choose one.<p>I&#x27;m all for upgrading to Yosemite, but this is a problem.
nraynaud超过 10 年前
I always feel a bit strange around security and exploitation people. Security is important, but it&#x27;s so much easier to destroy and criticize stuff than to build something useful and try to balance all the aspects of a product.
billconan超过 10 年前
Thank you for sharing, this is a very good reading. I purchased a book about using buffer overflow to hack stuff. but I&#x27;m wondering how those kernel bugs were discovered?
评论 #8665287 未加载
评论 #8665264 未加载