Hacking Arbitrary rw webkit exploit on 5.0.1

[punderino]

https://twitter.com/marcograss/status/984448863766368256
Never heard of this guy but the tweet was liked by Derrek and Ned Williamson so I'm assuming it's real.

 

[Deleted-442439]

https://twitter.com/marcograss/status/984448863766368256
Never heard of this guy but the tweet was liked by Derrek and Ned Williamson so I'm assuming it's real.

I am sure this is legit, but the images are not proof of anything, making the browser show a notification with any custom text can be done by anyone.

 

[Deleted User]

Pretty cool, hopefully it can eventually be used for greater things

 

[Deleted User]

an webkit exploit on that higher firmware? thats great news

 

[Reploid]

Switch is so exploitable.

 

[_______]

I am sure this is legit, but the images are not proof of anything, making the browser show a notification with any custom text can be done by anyone.

He's from Keen Lab, which is actually sponsored by the Chinese government at the back while looking like a private sector owned by Tencent. They got 0-days for almost anything, from Tesla cars to latest version of iOS. It would be easy for them to find a browser exploit on any device, like walking in the park.

 

[Deleted User]

He's from Keen Lab, which is actually sponsored by the Chinese government at the back while looking like a private sector owned by Tencent. They got 0-days for almost anything, from Tesla cars to latest version of iOS. It would be easy for them to find a browser exploit on any device, like walking in the park.

did they not discover an ps4 exploit back in time ?

 

[_______]

did they not discover an ps4 exploit back in time ?

No idea, but they probably hacked anything incase Xi wanted to invade the world with our microwaves. If Sony put out a Pwn2Own on PS4, I'm sure they'll be happy to reveal their findings.

 

[Risingdawn]

He's from Keen Lab, which is actually sponsored by the Chinese government at the back while looking like a private sector owned by Tencent. They got 0-days for almost anything, from Tesla cars to latest version of iOS. It would be easy for them to find a browser exploit on any device, like walking in the park.

I take it these guys are private then, as in don't release findings?

Off topic, your name and image are slightly freaking me out, like some kind of ghost in the machine

 

[_______]

I take it these guys are private then, as in don't release findings?

They did release their findings, but only to the vendors. Once fixed, exploits will be listed as CVEs. But I don't think they will let you know which CVE could be used on your console or how.

 

[Risingdawn]

They did release their findings, but only to the vendors. Once fixed, exploits will be listed as CVEs. But I don't think they will let you know which CVE could be used on your console or how.

Ah shame, thanks for the info though.

 

[guily6669]

Release date... Never!

For someone working for China this is a crime, I mean isn't China the country that the government even support copying everything they see?

 

[Deleted User]

"The Switch is so secure"
...


it's been hacked in a year...