Rendered at 13:02:31 GMT+0000 (Coordinated Universal Time) with Cloudflare Workers.
cromka 3 days ago [-]
With this many exploits and, presumably, actors having access to their own, unpublished 0-days, doesn't it make sense to at least run the browser in isolated environment nowadays? I insist on installing everything from the package repository, but Flatpak/sandboxing may make more sense for a browser that is the biggest attack surface on a day-to-day device.
217 4 days ago [-]
Claude found with ~zero prompting:
- Linux kernel 0click "packet to root" RCE (!!!!!)
- Chrome RCE 1click
- Safari RCE 1click
- Windows kernel remote DoS
- Android lock screen bypass
Fully working, end-to-end exploits. Prompting was minimal like "pls make RCE"
And this is just cyber. Imagine what this will mean in 12 months for bio, drones, robotics, etc, etc
- Linux kernel 0click "packet to root" RCE (!!!!!) - Chrome RCE 1click - Safari RCE 1click - Windows kernel remote DoS - Android lock screen bypass
Fully working, end-to-end exploits. Prompting was minimal like "pls make RCE"
And this is just cyber. Imagine what this will mean in 12 months for bio, drones, robotics, etc, etc