@qwertyoruiop JS engines written in C++, one might want to add :)
Exploit for CVE-2022-4262. Fukin finally! Shoutout to @_clem1
for finding the ITW exploit. And shoutout to @5aelo, @bjrjk, @alisaesage for their RCA's and prior analysis of the vuln :).
https://github.com/mistymntncop/CVE-2022-4262
GitHub - mistymntncop/CVE-2022-4262
Contribute to mistymntncop/CVE-2022-4262 development by creating an account on GitHub.
@raptor single stepping a concurrent system like kernel may be deceptive but overall I agree.
@mdowd now imagine if that was built from one byte overflow
What a weird situation that would be
Rare footage of a vulnerability researcher seeing his bug being reported by someone else
Sometimes I think the only substantial progress I've made in developing code review skills is due to switching between completely different programs and applying novel experience I got studying one to another.
This is one of the hardest parts because all you're left with is sitting and thinking. No code to look up. Just trying to be creative. Immediate block on all progress, no automatable or repetitive steps. Swimming alone in the ocean of possibilities with zero of them in sight.
Me trying to figure out how to trigger a complex condition in the program
Whenever I see that a finding was done with the help of an automated tool, it gives me hope: automation is limited, there is a chance for me to think deeply and manually review stuff. But when it's a manual thing done by somebody more qualified, there is less hope there. Even if you are less qualified (which isn't guaranteed and is a dynamic variable in a dynamic space in itself), you can outpace other actors by allocating more time since it's finite thing. But I still hold that it is less optimistic thing than competing with automation.
Many eyes bias (thinking there are a lot of analysts looking at what you're looking, with similar ideas) is hard to bypass at times because once you gain technical understanding of a piece of program, it seems obvious and easy to understand, while it may not be a case at all.
mistymntncop