(In)security of multi-process web browsers \ VOGONS

(In)security of multi-process web browsers

Topic actions

First post, by UCyborg

UCyborg Offline

Rank Oldbie

Rank: Oldbie
Posts: 926
Joined: 2015-09-04, 11:10
Location: Slovenia

The architecture that was so often praised for improved security and ability to isolate rogue tabs...collapses under a rather simple exploit of continuously changing the webpage title.

https://www.theregister.com/2025/10/29/brash_ … ashes_chromium/

Arthur Schopenhauer wrote:
A man can be himself only so long as he is alone; and if he does not love solitude, he will not love freedom; for it is only when he is alone that he is really free.

Reply 1 of 2, by jtchip

Posted on Today, 01:48

jtchip Offline

Rank Member

Rank: Member
Posts: 309
Joined: 2019-06-17, 22:24

Firefox and Safari are also multi-process and are immune to this attack, as stated in the second last paragraph of the article.

Reply 2 of 2, by UCyborg

Posted on Today, 10:06

UCyborg Offline

Rank Oldbie

Rank: Oldbie
Posts: 926
Joined: 2015-09-04, 11:10
Location: Slovenia

The proof of concept is artificially restricted to Chrome by user agent check. You can run it through the console by executing:

1Brash.run({burstSize: 8000,interval: 1});

It still managed to cause significant RAM consumption and slowed PC down when ran on Firefox and pagefile started to grow, so I wouldn't say Firefox is bulletproof.

Arthur Schopenhauer wrote:
A man can be himself only so long as he is alone; and if he does not love solitude, he will not love freedom; for it is only when he is alone that he is really free.

Go to top of page Go to top of page

Back to Milliways