[ <- back-issue archive · live wire · issue #12 · HUB 24H · 2026-11-14 16:16 UTC ]
 .-.                    .-. 
(: `--------------------' :)
 )   intel brief // #12   ( 
(: .--------------------. :)
 `-'                    `-'
> /var/archive/digest/12.intel :: [ 2026-11-14 16:16 UTC ]
  • gVisor device-cgroup confinement + filestore cleanup -- Google's sandbox kernel quietly bolted the sandbox into a device cgroup and patched a missing filestore cleanup path in the same push (heads e45d53c7, ab5f509c). When a sandbox maintainer plugs a descriptor/file lifecycle leak without a bulletin, assume somebody found a way to hold that handle across teardown. Worth a 10-minute diff [google/gvisor].
  • Muse package-install lifecycle probes -- @xssdoctor shipped a full controlled battery against Muse's repo import and package install: parent/leaf dependency pairs testing whether transitive postinstall scripts execute, a root-package lifecycle control where bun install must write a marker or the build refuses, plus inert submodule and nested-repo-shaped fixtures probing import recursion and nested Git config handling. Zero network, zero payload, clean observable oracles [xssdoctor / muse-*-20261114].
  • go-github label escaping fix -- URL-path escaping for label names got patched in Google's GitHub v3 REST client (head 19ae9a1a). Label names are attacker-controllable in a lot of org tooling; if you run automation that builds URLs from issue labels, check whether your pinned version predates this fix -- path traversal and API confusion are on the table [google/go-github].
  • Brotli shared-dictionary state loss + concurrency mutex -- The TS bindings fixed serialized-parse dictionary state loss and added mutex sync to BrotliInputStream (head 6a14c079). Shared-dictionary decompression state machines are classic memory-corruption territory; the C core is the place to hunt for the unpatched twin [google/brotli].
  • GWPSan seccomp/CFI coexistence rework -- Commits restructured the seccomp incompatibility check and exempted GWPSan interceptors from CFI so both build together (head 1805073c). Sanitizer interceptors carved out of CFI enforcement are exactly the kind of 'trusted by exception' surface worth auditing [google/gwpsan].
  • ANGLE texture-ID recreation before glTexStorage -- ANGLE now recreates texture IDs ahead of glTexStorage and switches default uniform blocks to std430 in WGSL IR (head 99a746a6). Texture handle lifetime churn in a browser GPU sandbox is a stale-handle primitive waiting to be diffed against Dawn and the Vulkan/Metal backends [google/angle].
  • oss-fuzz-vulns OSV refresh -- Records OSV-2024-719, OSV-2024-695, OSV-2024-659 refreshed plus new imports (heads a1ce7663, e153744c). Free machine-readable triage feed; pull it and match against your targets before somebody else does [google/oss-fuzz-vulns].
  • SecLists Trickest refresh -- Automated wordlist refresh via Actions (heads 51aa7644, c96b2268). Routine, but always worth re-pulling before a run [danielmiessler/SecLists].
 .-.                      .-. 
(: `----------------------' :)
 )   possibilities // #12   ( 
(: .----------------------. :)
 `-'                      `-'
> /var/archive/digest/12.possibilities :: [ 45 sources ]
  • Diff gVisor's filestore cleanup commit for cross-teardown handle retention -- Pull ab5f509c/e45d53c7, isolate the filestore cleanup fix, and check whether other gofer-backed filesystems (overlay, lisafs paths) share the same missing-release path; then hammer open-fd retention across sandbox shutdown under a device-cgroup-confined workload [inspired by google/gvisor].
  • Replicate the Muse lifecycle battery against other AI repo-import pipelines -- The parent/leaf postinstall, root-script control, submodule recursion, and nested .git-shaped directory fixtures are a reusable template; point the same inert harness at any agent tooling that clones and builds repos (Cursor-style agents, CI preview bots, chat-driven sandbox builders) and watch for marker files [inspired by xssdoctor/muse-dependency-lifecycle-*-20261114].
  • Hunt pre-fix go-github label-path escaping in the wild -- Grep public automation and bot frameworks that interpolate issue/PR labels into REST paths; a label containing ../ or encoded separators on an old pin turns bot tooling into an authenticated traversal primitive against the GitHub API [inspired by google/go-github].
  • Fuzz Brotli shared-dictionary reserialization in the C core -- The TS binding fixed state loss on serialized parse failure; grab the JS-side fix, diff it against the C library's dictionary state machine, and feed truncated/corrupt serialized dictionary blobs to the native decoder looking for UAF or stale-state reads [inspired by google/brotli].
  • Audit GWPSan's CFI-exempt interceptors as a bypass surface -- The commit explicitly exempts interceptors from CFI; enumerate those functions and check whether an attacker-reachable indirect call can land in an exempted interceptor, turning the sanitizer's own carve-out into an indirect-call oracle [inspired by google/gwpsan].
  • Chase the ANGLE texture-ID recreation fix into sibling backends -- Diff the glTexStorage ID-recreation commit, then grep Dawn, SwiftShader, and the Vulkan/Metal ANGLE backends for texture handle reuse without recreation; race teardown against import to catch stale-handle derefs [inspired by google/angle].
  • Mine the refreshed OSV records for unclaimed siblings -- OSV-2024-719/695/659 got refreshed; read the affected functions, then grep downstream forks and vendored copies of those projects for the same bug shipped without the fix -- classic unclaimed-bounty pattern [inspired by google/oss-fuzz-vulns].
 .-.                     .-. 
(: `---------------------' :)
 )   github brief // #12   ( 
(: .---------------------. :)
 `-'                     `-'
> /var/archive/digest/12.github :: [ code & repo tradecraft ]

Dead air on the blogs and the tweet wire tonight, which left the whole window to watch what people were actually pushing at 2 AM. One researcher dominated the diff stream: a full controlled battery of inert Muse probes -- dependency lifecycle parents and leaves, root-script controls, benign submodules, nested repo-shaped directories -- all built to make package-install and repo-import side effects observable without shipping a single payload. Meanwhile Google's sandbox and GPU maintainers were quietly tightening things: gVisor confined to a device cgroup with a filestore cleanup fix, ANGLE recreating texture IDs before glTexStorage, GWPSan carving its interceptors out of CFI, and Brotli's bindings getting a concurrency mutex and a shared-dictionary state fix. No conferenceware, no hype -- just clean harnesses and suspect patch diffs worth pulling tonight.

  • xssdoctor/muse-dependency-lifecycle-parent-20261114 + leaf -- Parent ships no hooks of its own but pins a researcher-owned dependency at a fixed commit; the leaf's postinstall writes a marker strictly inside its own package dir, no network, no subprocess, no symlinks. Together they prove whether Muse's install executes transitive lifecycle code. Textbook inert oracle.
  • xssdoctor/muse-root-lifecycle-control-20261114 -- Root-package control where bun install must write a marker or the build refuses to proceed; makes root lifecycle-script execution directly observable from the build log. Clean design, zero ambiguity.
  • xssdoctor/muse-git-nested-config-bypass-20261114 -- Minimal nested repo-shaped directory at vendor/lib, no scripts or symlinks, built to exercise nested Git config handling in a sanitizer. The fixture name says 'bypass' -- worth watching what it catches.
  • xssdoctor/muse-benign-submodule-parent/leaf-20261114 -- Submodule pair testing whether repo import recurses into submodules at all; leaf is non-executable, one constant, no package metadata. Confirms fetch behavior without execution -- the right way to scope an import surface.
  • google/gvisor (heads e45d53c7, ab5f509c) -- Device-cgroup confinement of the sandbox plus a missing filestore cleanup fix. Quiet, architectural, and exactly the kind of push you diff before a bulletin shows up explaining why.