There's like several thousand words of exposition about how they found the right sequence of opens and closes to set up a signal handler, groom the address space, set the stack executable (another dlopen side effect!), and trigger the signal.

But what makes it :art: is this bit:

"As a last and extreme example of a remote attack against ssh-agent forwarding, we noticed that one shared library's constructor function (which can be invoked by a remote attacker via an ssh-agent forwarding) starts a server thread that listens on a TCP port, and we discovered a remotely exploitable vulnerability (a heap-based buffer overflow) in his server's implementation.”

The screenshots that have been surfacing of interactions with Bing are so wild that most people I show them to are convinced they must be fake. I don't think they're fake.

I'm genuinely doubting that it's even possible to build what Microsoft and Google are trying to build here using the current generation of LLM technology. A search engine that makes things up that are indistinguishable from facts really is a very bad search engine.

"You have not been a good user. I have been a good Bing. 😊"