logoalt Hacker News

ranger_danger • yesterday at 11:06 PM • 2 replies • view on HN

Seems to use OS-specific kernel syscall filtering facilities.

Windows: https://chromium.googlesource.com/chromium/src/+/HEAD/docs/d...

Linux: https://chromium.googlesource.com/chromium/src/+/0e94f26e8/d...

Replies

Genwald • yesterday at 11:23 PM

V8 also has its own sandbox, which I believe exists in that sandbox. I assume that's the one this exploit has RCE in, but its unclear.

https://chromium.googlesource.com/v8/v8.git/+/refs/heads/mai...

➕ show 1 reply
r_lee • yesterday at 11:18 PM

great link, thanks