VOGONS


First post, by UCyborg

User metadata
Rank Oldbie
Rank
Oldbie

The architecture that was so often praised for improved security and ability to isolate rogue tabs...collapses under a rather simple exploit of continuously changing the webpage title.

https://www.theregister.com/2025/10/29/brash_ … ashes_chromium/

Arthur Schopenhauer wrote:

A man can be himself only so long as he is alone; and if he does not love solitude, he will not love freedom; for it is only when he is alone that he is really free.

Reply 1 of 2, by jtchip

User metadata
Rank Member
Rank
Member

Firefox and Safari are also multi-process and are immune to this attack, as stated in the second last paragraph of the article.

Reply 2 of 2, by UCyborg

User metadata
Rank Oldbie
Rank
Oldbie

The proof of concept is artificially restricted to Chrome by user agent check. You can run it through the console by executing:

Brash.run({burstSize: 8000,interval: 1});

It still managed to cause significant RAM consumption and slowed PC down when ran on Firefox and pagefile started to grow, so I wouldn't say Firefox is bulletproof.

Arthur Schopenhauer wrote:

A man can be himself only so long as he is alone; and if he does not love solitude, he will not love freedom; for it is only when he is alone that he is really free.