At a glance, it looks like it exploits a bug in WebKit's JavaScriptCore JavaScript engine.Does the PS5's WebKit use JavaScriptCore with JIT enabled? Have to wonder if Sony will respond by disabled its JIT, to narrow the attack surface.
JavaScript is the gift and grift that keeps on giving. A security nightmare when in Flash, but a gate way to freedom nowadays.
Flash didn't use JS, but rather ActionScript. Which was very much inspired by ECMAScript, especially AS3 -- but Flash's security holes were all of Adobe's doing. Good times.
MaxBarraclough · · focus · HN ↗
Does the PS5's WebKit use JavaScriptCore with JIT enabled? Have to wonder if Sony will respond by disabled its JIT, to narrow the attack surface.
FlowingRiver · · focus · HN ↗
GranPC · · focus · HN ↗