New write-up with @GenericCoding on pois0nSword, our iOS 26.1 port of DarkSword: bypassing PAC to reach arbitrary native calls from a WebKit renderer R/W, by making dyld's own loader do the write.
varik.dev/blog/jsc/pois0nswo…
#WebKit #JavaScriptCore #iOS #exploitdev
Been exploring WebKit/JSC exploitation and wrote up a step-by-step walkthrough - from a caged OOB bug to cage-free arbitrary R/W with diagrams + a lab you can build.
varik.dev/blog/jsc/jsc-explo…
#WebKit #JavaScriptCore #BrowserExploitation #exploitdev #pwn
اپل #Apple یک پچ امنیتی برای رفع دو آسیب‌پذیری zero-day منتشر کرد که هکرها از آن برای سوءاستفاده از کامپیوترهای مک با چیپ اینتل استفاده می‌کردند.
یکی از این آسیب‌پذیری‌ها مربوط به اجرای کد مخرب از طریق #JavaScriptCore و دیگری به حملات #XSS از طریق موتور #WebKit مربوط است.
اپل از کاربران خواسته تا سیستم‌عامل خود را فوراً به‌روزرسانی کنند تا از این حملات جلوگیری شود.
#Bitcoin
Safari, Hold Still for NaN Minutes
blog.exodusintel.com/2023/12…
@sherl0ck__ @n30m1nd
@XI_Research
#VulnerabilityAnalysis #JavaScriptCore #ASLR #Safari
🚀"Bun speeds things up by utilizing the JavaScriptCore engine, while Node.js relies on the JavaScript V8 engine. JavaScriptCore is optimized for quicker startup, making Bun a great choice for faster performance. 💨 #NodeJS #JavaScriptCore #Bun #100daysofcoding"
WebAssembly: Wasmer 3.3 bringt Unterstützung von JavaScriptCore heise.de/news/WebAssembly-Wa… #Backend #JavaScriptCore
If we compare @Nodejs with other competitors such as #Bun and @deno_land we can see a lot of similarities and good practices
Whereas Node.js and Deno use V8 Bun uses #JavaScriptCore to execute JavaScript code
Well... this raises questions.
/3
Our next event (2022-11-24, 1900 CET ONLINE (#Zoom), @ctietze: "Make your app extensible with #JavaScriptCore"!
Interesting article - Is Bun.js the Node.js killer?
#v8 #JavaScriptCore #bun #nodeJS #JavaScript #webdevelopment #webdev
levelup.gitconnected.com/is-…
Don’t we all like to have the flexibility to follow any pattern for naming exported Swift API without limiting us to predefined conventions? Luckily, there is a different way of doing it: tabris.com/rename-selectors-…
#functions #JavaScriptCore #JSExportAs #selectors #Swift #ios
At @igalia we not only do a lot of feature development on JSC 64bits but also on 32bits (ARMv7 and MIPSel). Here's a brief tour of the implementation of the for-of intrinsic for JSC 32bit that landed a few months ago: linki.tools/2020/11/a-tour-o… #webkit #javascriptcore #javascript
Been testing @panic's upcoming Nova code editor for a while. It has the snappiness of @sublimehq, the thoughtful details of @macromates's #textmate. The power of #JavaScriptCore, and the flexibility of @Microsoft's Language Server Protocol should bring it close to @code.
"Speculation in JavaScriptCore" by @filpizlo @webkit => bit.ly/3gl7GJa
{ #js #webkit #javascriptCore }
Do you know those tasks where you think : "Sure - it will take a couple of weeks.".
Month and half later: "What da' hell?"
Well, for...of optimization with intrinsics just landed in JSC for 32 bit archs: trac.webkit.org/changeset/26…
#igalia #javascriptcore #webkit
地道に息の長い JavaScriptCore の本だったりするのですけれど、それに主に Promise についてを大きく追記してボリュームアップした電子版をリリースしました。 ez-net.booth.pm/items/188581… #JavaScriptCore
The @NativeScript team is working on total revamp of the #iOS runtime. The goal is to use the V8 engine instead of #JavaScriptCore. Several months ago the team shipped an alpha version of this runtime and now it’s time to announce the next iteration. nativescript.org/blog/new-v8…
The #NativeScript team is working on total revamp of the #iOS runtime. The goal is to use the V8 engine instead of #JavaScriptCore. Several months ago the team shipped an alpha version of this runtime and now it’s time to announce the next iteration. nativescript.org/blog/new-v8…