Probably just getting triggering excessive backtracking on some regex.
Ironic, from the authors of RE2. They know the correct way to implement regexes. Though, when I worked on Google's indexing system, some researchers were having machine learning generate regexes to run on every page in the visible web... and mis-implemented the feature to re-compile the regex to DFA (which re2 effectively lazily converts to NFA via memoization) for every single page load. The speed of the indexing sy…
Some people might get off on that kind of culture. But this story makes me glad I don’t work there for some reason.
I remember discovering that pasting a specific emoji to Google Slides causes the slide to become "poison". You could not view or edit it, the web UI would crash if you clicked on the slide. I discovered this by accident, but did not think much of it as I was able to work around by deleting the slide from the document overview.
``` TypeError: Cannot read properties of null (reading 'C') at Ccf ( https://docs.google.com/static/document/client/js/157553674-... ) at Bcf ( https://docs.google.com/static/document/client/js/157553674-... ) ``` Has something to do with grammar. The document does not fail when `Show grammar suggestion` is turned off.
does it talk to a grammar check api endpoint or is it done locally? would be funny if it were a remotely exploitable bug in an api endpoint.
> Remotely exploitable bug causing grammar check api to fail to perform grammar checks? Doesn’t sound too exciting.
famous last words. finding security relevant bugs is often a game of identifying what the original developers might have found to be not "too exciting" or places they were out of their depth and then focusing intense effort on finding their mistakes.
``` TypeError: Cannot read properties of null (reading 'C') at Ccf ( https://docs.google.com/static/document/client/js/157553674-... ) at Bcf ( https://docs.google.com/static/document/client/js/157553674-... ) ``` Has something to do with grammar. The document does not fail when `Show grammar suggestion` is turned off.
I see Google has finally implemented the Zombie Strunk & White AI like I requested years ago.
I did not expect them to weaponize it, but Skynet does as Skynet does.
That's probably a cyber crime in most US states. Edit: You guys have no sense of humor.
try /s at the end of "offending" sentence, most people will look at it more kindly.
I'm sure you're great. Nothing against you, but please don't do that. Just write what you mean if you can't handle some people misinterpreting a sarcastic remark. Let's think about this for a second. What's the point of sarcasm? If you have to tell people you're being sarcastic, are you still being sarcastic? Not sure what territory, "/s" blunders into, but I'm confident it's not sarcasm. It's something else that seems kinda... dumb... like on a fundamental level. Did people think themselves above saying, "jk"? Mostly I've just seen, "/s" beg the question of why someone would go and ruin a good sarcasm, or whether the thing they labeled as such was ever sarcasm to begin with. Like the parent comment here for example, it's not sarcasm. There's no biting irony, mockery, or criticism. It's just a silly non-sequitur joke remark. You'd have to be like legitimately autistic or something to not see that, and at that point, "/s" is just a drop in a bucket. I mean hot-take here, sorry, but let's think twice before adopting social queues from reddit.
Ironic, from the authors of RE2. They know the correct way to implement regexes. Though, when I worked on Google's indexing system, some researchers were having machine learning generate regexes to run on every page in the visible web... and mis-implemented the feature to re-compile the regex to DFA (which re2 effectively lazily converts to NFA via memoization) for every single page load. The speed of the indexing sy…
Some people might get off on that kind of culture. But this story makes me glad I don’t work there for some reason.
There's a good deal of responsibility in writing code that is going to run over every single page (and PDF document, MS Word doc, the higher ranked Flash animations, etc.) in the visible web.
For my part, I once made a bad assumption about how the Google SAX-style parser handled callbacks for zero-length XHTML start-stop tags. I presumed that would get a callback with the end-of-open-tag and start-of-close-tag pointers being equal, at the character after the close of the tag. Instead, the parser called the callback with the start-of-close-tag pointer after the start-of-close-tag pointer. (I had misinterpreted the API as passing pointers to the start and end of enclosed content.) I had test cases for un-closed tags and ... but when my code hit production, the few pages (fewer than 1 in a million) that expressed an empty title as caused my code to try and construct a string with negative length and crashed that portion of the indexing system. I was right to feel very embarrassed for my oversight.
I remember the savage meme so clearly because it was quite out of the norm, and I felt bad for the guys since they were so quick to fix things even when not publicly shamed. (Only the author and reviewer got notified when I left a comment on their code review.)
Here's a bug I discovered in MS Word in 2004, which has survived the past 18 years of updates and is even present in the web version: https://1drv.ms/w/s!AgYiBqBjIZZpfkcvO9jnOel9T2o?e=tFA4wp If you join the two lines using a backspace at the start of the second line, the second line turns into gibberish.
Rewritten for clarity (and because I now actually know what's happening): If you look at the XML (change .docx to .zip) in styles.xml you see the declaration of the style "BodyText3": The first line ("paragraph") has its style set to "BodyText3", but also has formatting on that section of text itself, overriding it. Once the lines are joined into one paragraph, the paragraph formatting appears in the second part beca…
Cool! This was pre-XML Word, and since introducing it became impossible at some point, I always just figured it had been a bug. Probably the bug was only in the creation, as I do remember the sequence of edit actions made no sense. I think it even had to include an undo.