Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

The Deathray: A simple way for an untrusted site to freeze a Mac

auberon.xyz

Post reply on HN
Print view View original

61–70 of 198 posts

Re: The Deathray: A simple way for an untrusted site to freeze a Mac

#61

Post by wpm »

iAMkenough wrote: post #6
selectodude wrote: post #4

Zero impact on iOS 27.

Still impacts macOS 27 release candidate.

Yes, but it didn't kernel panic my computer, it just forced WindowServer to quit, but it "helpfully" reopens all of your windows/apps, so it reloads the tab that caused the deadlock to begin with, rinse and repeat.

It's always funny to me when you put computers into such states. Last time I was tickled this was was when I nuked the TCC database permissions for Zoom while in a meeting, sharing my screen, using my microphone and camera. The OS rrrrreally didn't like that.

Re: The Deathray: A simple way for an untrusted site to freeze a Mac

#62

Post by davsti4 »

I supposed you could just turn it off?

In Chrome on Linux:

WebGPU is experimental on this platform. See https://github.com/gpuweb/gpuweb/wiki/Implementation-Status#... deathray/:9

Failed to create WebGPU Context Provider main @ deathray/:9 (anonymous) @ deathray/:113

Uncaught (in promise) TypeError: Failed to execute 'configure' on 'GPUCanvasContext': Failed to read the 'device' property from 'GPUCanvasConfiguration': Required member is undefined. at main (deathray/:17:17)

Re: The Deathray: A simple way for an untrusted site to freeze a Mac

#63

Post by abecedarius »

LoganDark wrote: post #15

Apple Silicon Macs have a lot of GPU problems. I find that after running any significant GPU workload, the entire operating system starts getting super slow until a reboot. Even if the entire process tree that ever touched the GPU has been completely terminated for days.

Sounds like a problem that'd hit anyone running LLMs. I haven't tried on mine so far, but people do talk about ordering a $10k Mac Studio just for that. Anyone else see this? Does the OS version matter?

Re: The Deathray: A simple way for an untrusted site to freeze a Mac

#64

Post by washadjeffmad »

Back in the 90s when the web was non-commercial and fun, I added a "Don't Click Me" link that loaded a 'browser test' page (after a series of "are you really really sure?" dialogs) that exploited every historical browser bug I could find. Infinite popups, inescapable dialogs, ActiveX quirks, various hangs and crashes, the works.

If it didn't crash your computer, it eventually displayed a single popup that said "Congrats on not using Internet Explorer!". I wish I still had the hate emails.

Re: The Deathray: A simple way for an untrusted site to freeze a Mac

#65

Post by r3trohack3r »

washadjeffmad wrote: post #64

Back in the 90s when the web was non-commercial and fun, I added a "Don't Click Me" link that loaded a 'browser test' page (after a series of "are you really really sure?" dialogs) that exploited every historical browser bug I could find. Infinite popups, inescapable dialogs, ActiveX quirks, various hangs and crashes, the works. If it didn't crash your computer, it eventually displayed a single popup that said "Congr…

Were there multiple of these sites?

If not, I have fond memories of using yours!

Re: The Deathray: A simple way for an untrusted site to freeze a Mac

#67

Post by yesitdoes22 »

LoganDark wrote: post #54
yesitdoes22 wrote: post #40

Earlier quoted context omitted.

fwiw it froze my tab in seconds just pasting that into dev tools

I think running it in the DevTools console is different from having a script on the page.

No actually. The only reason it crashes in dev tools is that it is rendering the printed console log.

If you printed to some div in the page, you will get the same effect.

Do you understand the topic? Doesn't seem like it

Re: The Deathray: A simple way for an untrusted site to freeze a Mac

#69

Post by mitxela »

lmz wrote: post #58
stackghost wrote: post #56

Earlier quoted context omitted.

Hey you’re right, we should gladly accept every decision the big corps make. They know best, after all. We should probably lick their boots too, in gratitude for their benevolence.

The application delivery thing was done as far back as Netscape threatening to relegate Windows to "a poorly debugged set of device drivers" so Web-whatever is simply another step in that direction. Like I said, if you purists want just document delivery, you can use links or w3m or maybe Gemini.

Some kind of market forces kept Netscape in check back then. Now they aren't.

Like, Tesco would prefer that my operating system was a roast chicken, Baowu Group would prefer it was made of steel, Berghain would prefer that it had to queue for hours to possibly get in, and Jagex would prefer it was an in-game GUI within RuneScape. None of those companies got their way, what makes Netscape special?

Re: The Deathray: A simple way for an untrusted site to freeze a Mac

#70

Post by mitxela »

sgentle wrote: post #10

Could be a useful way to force user-interaction-gated flows. A "your computer is infected, click this button in 10 seconds or it will crash" type button which, at this point, most modestly-knowledgeable users would know not to click. However, after seeing their computer actually crash when the countdown hits 0, perhaps they would be more inclined to click "allow" on whatever prompt follows when they see it again. Of…

> Is denial of service not a security thing any more?

It is, but only when a big corp isn't doing it. X is allowed to deny you service without an account and Reddit is allowed to deny you service without uploading your personal documents to Persona.

Post reply on HN