M2dir: Treating mails as files without going crazy(bitfehler.srht.site)

159 points by cl3misch 2 years ago | 75 comments

Emacs arbitrary code execution and how to avoid it(eshelyaron.com)

117 points by oskardrums 1 year ago | 95 comments

Browser extensions spy on you, even if its developers don't(vitonsky.net)

113 points by vitonsky 3 years ago | 78 comments

Escaping the Chrome Sandbox Through DevTools(ading.dev)

371 points by vk6 2 years ago | 72 comments

Blog post describing how the author found CVE-2024-6778 and CVE-2024-5836, Chromium bugs letting a malicious extension escape the sandbox via DevTools, earning a $20,000 bounty.

Bypassing Google's big anti-adblock update(0x44.xyz)

941 points by deryilz 1 year ago | 816 comments

Blog post describing a Chrome bug that let extensions keep using webRequestBlocking to bypass Manifest V3's restrictions on adblockers.

About Google Chrome's "This extension may soon no longer be supported"(github.com)

208 points by 0x000042 1 year ago | 97 comments