[RSS] Browser Security Bugs that Aren't - #1: Local Attacks

https://microsoftedge.github.io/edgevr/posts/Browser-Security-Bugs-that-Aren-t-part-1/

@nf3xn Raymond Chen posts similar case studies quite frequently, these are probably attempts to improve signal/noise rate in bounty reports

https://devblogs.microsoft.com/oldnewthing/20240102-00/?p=109217

@nf3xn In my experience even otherwise smart and well-intentioned people often have trouble understanding the security boundaries of any given system. I consider walking juniors through these inconsistencies of their findings one of the most important part of mentoring.