With this many exploits and, presumably, actors having access to their own, unpublished 0-days, doesn't it make sense to at least run the browser in isolated environment nowadays? I insist on installing everything from the package repository, but Flatpak/sandboxing may make more sense for a browser that is the biggest attack surface on a day-to-day device.
217 13 hours ago [-]
Claude found with ~zero prompting:
- Linux kernel 0click "packet to root" RCE (!!!!!)
- Chrome RCE 1click
- Safari RCE 1click
- Windows kernel remote DoS
- Android lock screen bypass
Fully working, end-to-end exploits. Prompting was minimal like "pls make RCE"
And this is just cyber. Imagine what this will mean in 12 months for bio, drones, robotics, etc, etc
Rendered at 09:15:04 GMT+0000 (Coordinated Universal Time) with Vercel.
- Linux kernel 0click "packet to root" RCE (!!!!!) - Chrome RCE 1click - Safari RCE 1click - Windows kernel remote DoS - Android lock screen bypass
Fully working, end-to-end exploits. Prompting was minimal like "pls make RCE"
And this is just cyber. Imagine what this will mean in 12 months for bio, drones, robotics, etc, etc