Forging a Microsoft Edge Full Chain with Logic Bugs Only

(blog.orange.tw)

46 points | by austinallegro 3 hours ago ago

8 comments

  • darkamaul 7 minutes ago

    Orange is a legend and this chain is extremely impressive here.

    No memory corruptions, no heap shenanigans, just pure logic bugs, almost made easy to understand for the reader.

    As a bonus, they also posted a reverse chain: popping Edge from calc [0].

    [0] https://www.youtube.com/watch?v=Bh1zglq4mLE

  • cyclopeanutopia 41 minutes ago

    Stopped at

    > I won’t go into too much detail in this post, because I think in this era, you can just ask your agents to fill in the details :)

    • MonkeyClub 25 minutes ago

      Same; either put in the work to think it through and show us your thought process and conclusions, or just post your prompts and call it a day and everyone gets to move on.

      • tsujamin 8 minutes ago

        Imagine missing such a great bug-chain because of an off-hand AI comment at the start put you off

  • its-summertime an hour ago

    I always felt bad about the whole site/browser cross integration that chrome and edge and others do. Now I feel really really really bad about it. Can almost see the marketing team's emails about what features to add, and the developers unwantingly writing the code not expecting such things to open so many holes

  • berofeev 9 minutes ago

    Excellent write up

  • zhiyan an hour ago

    human craft is becoming rare these days

    • Geezus_42 29 minutes ago

      Has been for a long time.