[ <- back-issue archive · live wire · issue #18 · HUB 24H · 2026-11-14 17:00 UTC ]
 .-.                    .-. 
(: `--------------------' :)
 )   intel brief // #18   ( 
(: .--------------------. :)
 `-'                    `-'
> /var/archive/digest/18.intel :: [ 2026-11-14 17:00 UTC ]
  • xssdoctor's Muse lifecycle probe pair -- Parent pins a researcher-owned dep at a fixed commit with zero hooks of its own; the leaf's postinstall writes a marker strictly inside its own package dir. No network, no subprocess, no symlink -- a clean oracle for whether transitive install scripts actually run. Pair it with the leaf repo at xssdoctor/muse-dependency-lifecycle-leaf-20261114 [@xssdoctor].
  • google/gvisor device-cgroup confinement -- Google quietly tightened sandbox device-cgroup confinement, bolted on cgroup fixes, and plugged a missing filestore cleanup path in the same push. Whenever a sandbox maintainer patches a descriptor leak without a loud bulletin, assume somebody figured out how to hold that handle open across container teardown [google/gvisor].
  • google/go-github label-name escaping fix -- The v3 REST client patched label-name escaping in URL paths. That smells like path traversal or injection via crafted label strings (label -> raw path segment -> API confusion); worth a 10-minute diff against every other place the library interpolates user-controlled names into paths [google/go-github].
  • google/gwpsan CFI exemption -- The sampling sanitizer now exempts its own interceptors from CFI so both coexist, restructures the seccomp incompatibility check, and disables arm64 breakpoints when ignored. Sanitizer code that special-cases itself out of hardening is exactly where you hunt for interceptor confusion and seccomp-bypass edge cases [google/gwpsan].
  • google/j2cl cast-removal fixes -- The Java-to-Closure-JS transpiler fixed redundant-cast removal for intersection casts and null-literal casts. Compiler 'correctness' bugs here quietly mutate generated JS semantics -- a wrong cast elision in emitted code is a type-confusion primitive handed to every downstream app [google/j2cl].
  • vitorfhc/videt negative-day watcher -- Watches major OSS repos for silent security patches landing before a CVE is assigned, then checks whether the fix is actually reachable/exploitable. Targets the commit-to-advisory gap where hunters eat first [@vitorfhc].
  • google/skills cloud actuation grants -- New cloud-operator, compute-vm-creation, and GKE multitenancy skills each hand an agent real cloud actuation. Review the scope grants before pointing anything autonomous at it -- 'setup' skills are IAM footguns with a README [google/skills].
  • JorianWoltjer/responder nested autocomplete -- The query-param PoC server added nested autocomplete in SVG/XML plus a small-screen scrolling fix. Still the fastest way to spin shareable header-gated XSS proof pages with custom response headers baked into the URL [@JorianWoltjer].
 .-.                      .-. 
(: `----------------------' :)
 )   possibilities // #18   ( 
(: .----------------------. :)
 `-'                      `-'
> /var/archive/digest/18.possibilities :: [ 45 sources ]
  • Diff the go-github escaping fix for sibling injection points -- Pull commit 19ae9a1a, see exactly how label names get escaped now, then grep the whole client for other user-controlled strings interpolated into URL paths (milestones, deployments, statuses). Every unpatched twin is a potential path-traversal or 404-confusion primitive [inspired by google/go-github].
  • Hammer gVisor filestore teardown under descriptor retention -- Grab e45d53c7, focus on the filestore cleanup path and device-cgroup confinement, and try holding a device or file descriptor open across sandbox teardown under thread contention to see if the new cleanup actually reaps [inspired by google/gvisor].
  • Hunt cast-elision miscompiles in j2cl output -- Feed the transpiler intersection-cast and null-literal edge cases beyond the fixed ones (generics bridges, boxed comparisons), diff emitted Closure JS against JVM behavior, and look for type confusion in the generated semantics [inspired by google/j2cl].
  • Probe gwpsan's CFI-exempt interceptors -- The interceptors are now explicitly outside CFI; check whether an attacker-reachable path can land execution inside an interceptor region and inherit the exemption, and re-examine the restructured seccomp incompatibility check for filter gaps on arm64 [inspired by google/gwpsan].
  • Replicate the Muse lifecycle oracle against other agent installers -- The parent/leaf marker-file pattern from xssdoctor's pair is a reusable harness; point it at any tool that clones repos and runs bun install/npm install on untrusted trees and see whose postinstall actually fires. The root-lifecycle control at xssdoctor/muse-root-lifecycle-control-20261114 extends the same test to root-package scripts [inspired by xssdoctor/muse-dependency-lifecycle-parent-20261114].
  • Exercise nested git-config handling with the bypass fixture -- The vendor/lib nested repo-shaped directory in xssdoctor/muse-git-nested-config-bypass-20261114 is built to stress nested Git config resolution; run clone-and-inspect workflows and sanitizers over it and check whether a nested .git/config can smuggle settings into the outer checkout [inspired by xssdoctor/muse-git-nested-config-bypass-20261114].
  • Mine oss-fuzz-vulns refreshed OSV records for reachable twins -- OSV-2024-719, OSV-2024-695 and OSV-2024-659 were just refreshed; map each to its upstream fix commit and grep sibling parsers/codecs for the same unpatched pattern before the advisory lands [inspired by google/oss-fuzz-vulns].
 .-.                     .-. 
(: `---------------------' :)
 )   github brief // #18   ( 
(: .---------------------. :)
 `-'                     `-'
> /var/archive/digest/18.github :: [ code & repo tradecraft ]

Dead air on the blogs and wires, so the real action was all in the git push stream at 2 AM. One researcher flooded the zone with a dozen deliberately inert Muse harnesses -- parent/leaf package pairs, submodule controls, nested-config fixtures, tarball baselines -- every one built to make one question observable: what does an agent's install-and-build pipeline actually execute when handed an untrusted repo. Meanwhile Google's maintainers were quietly bolting locks onto sandbox state, patching URL escaping in a widely-used API client, and exempting their own sanitizer from CFI. No conferenceware, no hype -- just clean oracles and a few suspect diffs worth pulling tonight.

  • xssdoctor/muse-dependency-lifecycle-parent-20261114 -- Parent package with no hooks pinning a researcher-owned dep; combined with the leaf's marker-writing postinstall, it's a textbook transitive install-script execution oracle. Clean, inert, five minutes to run.
  • xssdoctor/muse-root-lifecycle-control-20261114 -- Root-package lifecycle control: bun install writes a marker and the build refuses to proceed without it, making root script execution directly observable. Simple and tight.
  • xssdoctor/muse-git-nested-config-bypass-20261114 -- Minimal nested repo-shaped directory at vendor/lib, no scripts or symlinks, built to exercise nested Git config handling in sanitizers. Zero payload, pure fixture.
  • xssdoctor/muse-benign-submodule-parent-20261114 -- Submodule import control with a leaf supplying one constant; tests whether repo import recurses into submodules without executing anything. Pair with xssdoctor/muse-benign-submodule-leaf-20261114.
  • JorianWoltjer/responder -- Query-param PoC server for shareable header-gated XSS proof pages; latest commits add nested autocomplete in SVG/XML output. Small utility, big leverage for bug-bounty reports needing a live demo URL.