Discover gists

Sandbox Escape in vm2@3.9.19 via `Promise[@@species]`

Summary

In vm2 for versions up to 3.9.19, Promise handler sanitization can be bypassed with @@species accessor property allowing attackers to escape the sandbox and run arbitrary code.

Proof of Concept

Symbol Improvement Proposals (SIPs)

The goal of the Symbol Improvement Proposals (SIP) project is to standardize Symbol itself and its associated practices while providing high-quality documentation. This repository is used to track past and ongoing improvement proposals (SIPs) for Symbol. SIP-1 outlines how SIPs are published.

On the status page, SIPs are tracked and listed in the following categories:

Core SIPs: Improvements to Symbol's consensus protocol.
Networking SIPs: Specifications for Symbol's peer-to-peer network layer.
Interface SIPs: Standardization of Symbol interfaces, determining how users and applications interact with the blockchain.
Application SIPs: Standards for the application layer, specifying how applications operating on Symbol interact with each other.

IMPORTANT: DON’T USE THIS GUIDE AS IS. GNOME HAS A WEIRD VSYNC ISSUES. Instead you can use the official Debian image and make sure all the updated drivers are installed and the rest should remain the same.

Preamble

This guide is made using the Orange Pi 5B 4GB+32GB. The device is capable of handling a 4k 120hz stream but you should know that the decode time for 4k stream hovers around 8ms and can spike up to 15ms during a benchmark. I can’t feel any added latency from it and I don’t have any dropped frames. The decode time goes down to 4ms for 1440p. It’s certainly not the blazing fast sub ms decode latency we get on the Steam Deck or mini PCs. I bought the device for $99 and for that price I think this performance is fantastic, but your mileage/expecations may vary.

How to get this result (or rather how I got it)

Install the official Gnome Ubuntu Jammy image using Balena Etcher onto a 16+ GB microSD card

Chat GPT "DAN" (and other "Jailbreaks")

	using UnityEngine;

	/// <summary>
	/// A simple FPP (First Person Perspective) camera rotation script.
	/// Like those found in most FPS (First Person Shooter) games.
	/// </summary>
	public class FirstPersonCameraRotation : MonoBehaviour {

	public float Sensitivity {
	get { return sensitivity; }

	version: '3.3'

	services:
	mssql:
	container_name: sql-server
	image: mcr.microsoft.com/mssql/server:2017-latest
	#image: mcr.microsoft.com/mssql/server:2017-CU11-ubuntu
	restart: always
	environment:
	ACCEPT_EULA: "Y"

	import androidx.compose.animation.animateColorAsState
	import androidx.compose.animation.core.animateFloatAsState
	import androidx.compose.foundation.background
	import androidx.compose.foundation.layout.Box
	import androidx.compose.foundation.layout.RowScope
	import androidx.compose.foundation.layout.fillMaxSize
	import androidx.compose.foundation.layout.padding
	import androidx.compose.material.*
	import androidx.compose.material.icons.Icons
	import androidx.compose.material.icons.filled.Delete

	<!DOCTYPE html>
	<html lang="en">
	<head>
	<meta charset="UTF-8">
	<meta name="viewport" content="width=device-width, initial-scale=1.0">
	<title>Custom Scrollbar Windows 95 Style</title>
	<style>
	body {
	margin: 0;
	font-family: Arial, sans-serif;

	<!DOCTYPE html>
	<html lang="en">
	<head>
	<meta charset="UTF-8">
	<meta name="viewport" content="width=device-width, initial-scale=1.0">
	<title>Vertical Bar with Images</title>
	<style>
	body {
	display: flex;
	justify-content: center;