17 comments

[ 4.2 ms ] story [ 48.4 ms ] thread
The left sidebar covers about a third of the content for me.
You can click on the hamburger menu to hide it.
Nope. Reader mode also doesn’t work, which is rather uncommon.
What browser are you using? On mobile Safari, I don't see the sidebar, and in Safari on macOS I can hide the sidebar. Reader mode doesn't work on either.
Reader mode should be working now. Just tested on mobile Safari.
(comment deleted)
Hi! It looks like I'd forgotten to update the CSS in one portion, due to this, on medium-sized screens, there was an overlap that occurred. This should be fixed now.
Really interesting bug in TurboFan's optimizer; getting Math.expm1 handling -0 incorrectly to removing bounds checks by dancing around multiple optimization passes was quite illuminating. Although, later in the exploit, it seems like using WebAssembly creates a RWX page? Why is Chrome doing this for WebAssembly when it stopped doing this for JavaScript, for obvious reasons?
And those Hacker News, Reddit and Twitter messages from Cloudflare employees about their VM-less workers's security will be gold in the future.
Wow, I feel very dumb after reading this.
It shouldn't make you feel dumb - it should just make you aware of the incredible breadth and depth of human knowledge out there.

For every single field, there is so much to learn and know. People often underestimate how complex their sister-fields are. You know enough to be dangerous, but not enough to know how much you don't know.

Hi! Author here. Happy to answer any questions.
Can anyone explain the bug and how it was exploited in simpler terms?