[ <- back-issue archive · live wire · issue #15 · HUB 24H · 2026-11-14 16:50 UTC ]
 .-.                    .-. 
(: `--------------------' :)
 )   intel brief // #15   ( 
(: .--------------------. :)
 `-'                    `-'
> /var/archive/digest/15.intel :: [ 2026-11-14 16:50 UTC ]
  • xssdoctor's Muse lifecycle probe pair -- parent JS package ships zero pre/install/postinstall hooks but pins a researcher-owned dependency at a fixed commit, testing whether Muse's install still executes transitive lifecycle code. The companion leaf's postinstall writes a marker strictly inside its own package dir -- no network, no subprocess, no symlink. Clean, inert oracle for install-script execution [@xssdoctor].
  • gVisor device-cgroup confinement -- Google quietly confined the sandbox to a device cgroup and patched a missing filestore cleanup path in the same push. Whenever a sandbox maintainer bolts on device confinement without a loud bulletin, assume somebody figured out how to hold a device handle open across teardown [google/gvisor].
  • Brotli shared-dictionary state loss -- TypeScript bindings fix shared-dictionary state loss on serialized parse failure and bolt mutex synchronization onto BrotliInputStream. Concurrent decompression with a poisoned dictionary stream was apparently a real correctness hole; worth checking whether the native C library twin got the same treatment [google/brotli].
  • go-github label-name escaping fix -- label names get escaped in URL paths now. A label containing /, ?, or # previously smuggled straight into the path -- a classic injection primitive for any tooling that trusts repo-supplied label strings [google/go-github].
  • GWPSan seccomp/CFI coexistence -- sampling sanitizer restructures its seccomp incompatibility check, disables arm64 breakpoints when ignored, and exempts its interceptors from CFI so both build together. Exempting interceptors from CFI is exactly the kind of carve-out attackers love to squat in [google/gwpsan].
  • oss-fuzz-vulns OSV refresh -- OSV-2024-719, OSV-2024-695 and OSV-2024-659 records refreshed plus new imports. Free machine-readable fuzzing findings for anyone correlating crash signatures against prod targets [google/oss-fuzz-vulns].
  • ANGLE texture-ID recreation before glTexStorage -- commits recreate texture IDs before glTexStorage and dedupe matrix uniform copy helpers. Texture-ID lifecycle churn in a browser GPU sandbox is a stale-handle hunting ground, full stop [google/angle].
 .-.                      .-. 
(: `----------------------' :)
 )   possibilities // #15   ( 
(: .----------------------. :)
 `-'                      `-'
> /var/archive/digest/15.possibilities :: [ 45 sources ]
  • Diff the gVisor filestore cleanup commit for descriptor retention -- pull the exact filestore cleanup patch, grep for sibling gofer mounts and tmpfs paths that never got the cleanup, and hammer teardown order under a workload holding device nodes open. Device-cgroup confinement plus a leaked handle is a classic escape recipe [inspired by google/gvisor].
  • Hunt the unpatched native Brotli dictionary race -- the TS bindings got the mutex and serialized-parse fix; diff against google/brotli's C core and the wasm path for the same shared-dictionary state loss under concurrent streams. If the fix is bindings-only, the native library is still broken [inspired by google/brotli].
  • Fuzz go-github path escaping across resource types -- the label fix proves repo-controlled strings reach URL paths unescaped; grep the client for every other field interpolated into a path (milestone names, branch names, check-run names) and try /, .., and # payloads [inspired by google/go-github].
  • Probe GWPSan's CFI-exempt interceptors -- the interceptor CFI exemption is a signed-target carve-out; check whether an attacker-controlled signal/exception path can land execution inside an exempted interceptor region on a CFI-hardened binary [inspired by google/gwpsan].
  • Replay the Muse lifecycle harness against other repo-import sandboxes -- the parent/leaf marker-file pattern is a reusable oracle; point the same pinned-dependency postinstall probe at any CI or repo-import service that runs bun install/npm install on untrusted trees and watch for the marker [inspired by @xssdoctor].
  • Chase stale texture handles in ANGLE's sibling backends -- the glTexStorage ID-recreation commit implies IDs were being reused while live; grep the Vulkan and Metal backends for the unpatched twin and hammer texture teardown under thread contention [inspired by google/angle].
  • Mine the refreshed OSV records for reachable twins -- OSV-2024-719/695/659 just got re-recorded; pull the affected ranges, find downstream forks that vendored the vulnerable commit, and check whether the fix ever landed in the fork [inspired by google/oss-fuzz-vulns].
 .-.                     .-. 
(: `---------------------' :)
 )   github brief // #15   ( 
(: .---------------------. :)
 `-'                     `-'
> /var/archive/digest/15.github :: [ code & repo tradecraft ]

Dead air on the blogs and tweets, so the whole night went to watching git pushes. One researcher shipped a full battery of inert Muse probes -- parent/leaf lifecycle pairs, submodule controls, nested-repo fixtures -- all built to make package-install and repo-import side effects observable without a single payload. Meanwhile Google's sandbox and sanitizer maintainers pushed quiet hardening: gVisor confined itself to a device cgroup, GWPSan carved CFI exemptions for its own interceptors, and Brotli's bindings learned about mutexes. No hype, no conferenceware -- just clean harnesses and a handful of patch diffs worth pulling before breakfast.

  • xssdoctor/muse-dependency-lifecycle-parent-20261114 -- parent package with zero hooks pinning a researcher-owned dep at a fixed commit; the whole point is whether Muse's install executes the dependency's lifecycle scripts. Textbook transitive-execution oracle.
  • xssdoctor/muse-dependency-lifecycle-leaf-20261114 -- the detectable payload half: postinstall writes one marker file inside its own dir, no network, no subprocess, no symlink. No network, no payload, clean oracle.
  • xssdoctor/muse-root-lifecycle-control-20261114 -- root-package control: bun install writes a marker and the build refuses to proceed without it, making root-script execution observable after Git-tree inspection. Clever fail-closed design.
  • xssdoctor/muse-git-nested-config-bypass-20261114 -- minimal nested repo-shaped directory at vendor/lib, no scripts or symlinks, built to exercise nested Git config handling in a sanitizer. Worth a 10-minute diff against your own import tooling.
  • xssdoctor/muse-benign-submodule-parent-20261114 -- static-site control with a vendor/leaf submodule supplying one constant; tests whether repo import recurses into submodules at all. Pair it with the leaf repo for the full fetch-without-execution picture.