Attached: 1 video

back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member

in edge, you wouldn't even notice anything out-of-place, and would stay connected to the c2 even after closing the browser

today, almost 4 years later, the bug is finally public:
https://issues.chromium.org/issues/40062121

Lobsters is a community-driven platform for sharing and discussing links to articles, tutorials, and projects related to technology and programming. Readers can learn about a wide range of topics, from software development and system administration to cybersecurity and artificial intelligence. With user submissions, comments, and voting, Lobsters provides a platform for collaborative learning and knowledge sharing among technology enthusiasts.

Lobsters

A security researcher discloses a Chromium browser bug discovered in 2022 that allows silently turning any Chromium-based browser into a persistent JavaScript botnet member with zero user interaction. The exploit works by visiting a single website and, in Microsoft Edge, persists even after closing the browser window due to Edge's background process behavior. The bug leverages service workers and took nearly 4 years to be addressed. Affected browsers include Edge, Brave, Opera, Vivaldi, and Arc. The bug report was briefly made public before being set to private again, with questions remaining about whether it is fully patched. Mitigations include disabling service workers via uBlock Origin CSP filters or NoScript.

Rebane: "back in 2022 i found a bug tha…"