Rebane1d ago

back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member

in edge, you wouldn't even notice anything out-of-place, and would stay connected to the c2 even after closing the browser

today, almost 4 years later, the bug is finally public:
https://issues.chromium.org/issues/40062121

Show threadRebane1d ago
OH NO I JUST REALIZED THIS IS NOT ACTUALLY PROPERLY FIXED AND STILL WORKS 💀💀
Show threadRebane1d ago

even worse, edge no longer even makes the download menu pop up, so it's completely silent js rce that keeps running even after you close the browser !!

all from just visiting a single website once !!

Show threadRebane1d ago
issue set to private again, hopefully it'll get fixed properly this time :p
Show threadSamantaz Fox1d ago
@rebane2001 Well, too late, it has already been archived :x
Show threadRebane1d ago

@SamantazFox out of curiosity, where? the archive.org captures don't load for me

edit: ty :)

Show threadLenni  ðŸ––1d ago
@rebane2001 @SamantazFox It's on archive.today/.is/.ph. Only go there with a content blocker, you're DDoSing a small blog otherwise: https://gyrovague.com/2026/02/01/archive-today-is-directing-a-ddos-attack-against-my-blog/
archive.today is directing a DDOS attack against my blog

Around January 11, 2026, archive.today (aka archive.is, archive.md, etc) started using its users as proxies to conduct a distributed denial of service (DDOS) attack against Gyrovague, my personal b…

Gyrovague
Show threadmilagemayvary1d ago

@Lenni @rebane2001 @SamantazFox

Archive.today is rolling out Google's QR reCaptcha as well paired with altering snapshots, seems like potential vector for a bad time.

https://mstdn.social/@milagemayvary/116601485354673260

Show threadRiver, Cachorrín de Los Andes

@milagemayvary @Lenni @rebane2001 @SamantazFox

archive.org has already scrubbed archives of incriminating words by sex offenders like Andrew Tate, Vitalik Butterin, and a DOGE staffer, so really, who can I wing for?

May 20 at 9:39pmWeb
Show threadmilagemayvary1d ago

@PuppyFromLosAndes @Lenni @rebane2001 @SamantazFox

I assume we're speaking of Kiwi Farms?

Is it scrubbed from archive.org, or is it present for research purposes?

I would assume they have kept the data, I think they would respond to a subpoena with the snapshot.

After about 10 minutes of searching, I'm not entirely sure if archive.today has been used as admissable evidence in a court room let alone successfully.

IANAL, I feel like this is a legal quagmire & legally safer to exclude?