Thread: Exploiting a Race Condition to print infinite money

Exploiting a Race Condition to print infinite money (blog.z.org)

HN 6 pts 1 comments by brutecat Sep 28, 2025 Security / Privacy thread

GhostRace: Exploiting and Mitigating Speculative Race Conditions (vusec.net)

L 4 pts 0 comments by fro Mar 13, 2024 hardwaresecurity Security / Privacy Maker / DIY / Hardware thread

Branch Privilege Injection: Exploiting branch predictor race conditions (comsec.ethz.ch)

HN 421 pts 213 comments by alberto-m May 13, 2025 Security / Privacy thread

See also: <i>ETH Zurich researchers discover new security vulnerability in Intel processors</i> - <a href="https://ethz.ch/en/news-and-events/eth-news/news/2025/05/eth-zurich-researchers-discover-new-security-vulnerability-in-intel-processors.html" rel="n...

Branch Privilege Injection: Exploiting Branch Predictor Race Conditions (comsec.ethz.ch)

L 8 pts 0 comments by fro May 13, 2025 hardwaresecurity Security / Privacy Maker / DIY / Hardware thread

Kernel double-fetch race condition exploitation on x86 – further thoughts (j00ru.vexillium.org)

L 4 pts 1 comments by jcs Jun 25, 2013 assemblyreversing Systems / Low-Level / OS thread

3D printer that lays down conductive traces as it goes (boingboing.net)

L 8 pts 0 comments by lawl Apr 29, 2014 hardware Maker / DIY / Hardware thread

System Sleuthing - Using ptrace to Print Backtraces (hoelz.ro)

L 2 pts 0 comments by hoelzro Jun 19, 2014 perl Programming (General) thread

Race conditions in operator += (blogs.msdn.com)

L 10 pts 3 comments by tedu Aug 14, 2014 dotnetprogramming Programming (General) thread

Original title: Customers not getting the widgets they paid for if they click too fast -or- In C#, the += operator is not merely not guaranteed to be atomic, it is guaranteed not to be atomic

InTrace: traceroute-like application that enumerates IP hops exploiting existing connections (code.google.com)

L 8 pts 1 comments by jcs Feb 25, 2015 networkingrelease Data / Databases / Infrastructure thread

HTTP Request Race Conditions on Facebook, DigitalOcean, LastPass (Fixed) (josipfranjkovic.blogspot.com)

L 2 pts 0 comments by Havvy Apr 27, 2015 securityweb Web Development Security / Privacy thread

Spurious wakes, race conditions, and bogus FIFO claims: A peek behind the curtain of WaitOnAddress (blogs.msdn.microsoft.com)

L 7 pts 0 comments by tedu Aug 27, 2016 cprogrammingwindows Systems / Low-Level / OS Programming (General) thread

Last in a series. Also of note: https://blogs.msdn.microsoft.com/oldnewthing/20160823-00/?p=94145 https://blogs.msdn.microsoft.com/oldnewthing/20160824-00/?p=94155 https://blogs.msdn.microsoft.com/oldnewthing/20160825-00/?p=94165

Race Condition vs. Data Race (blog.regehr.org)

L 10 pts 0 comments by kartik Oct 23, 2016 compilerscompsciprogramming Systems / Low-Level / OS Programming (General)Programming Languages / CS Theory thread

Avoiding race conditions in GenServer (bhelx.simst.im)

L 3 pts 0 comments by zem Mar 3, 2017 distributederlang Programming Languages / CS Theory Data / Databases / Infrastructure thread

Debugging a Race Condition in a Release Target (blog.boxofrox.me)

L 9 pts 0 comments by sanxiyn Aug 13, 2017 debuggingrust Systems / Low-Level / OS Programming (General) thread

The Worst Computer Bugs in History: Race conditions in Therac-25 (blog.bugsnag.com)

L 13 pts 2 comments by calvin Sep 20, 2017 practices Productivity / Career / Business Culture / Philosophy / History / Reading thread

Update PS4 4.55 BPF Race Condition Kernel Exploit Writeup (github.com)

L 1 pts 0 comments by lattera Mar 29, 2018 freebsdsecurity Systems / Low-Level / OS Security / Privacy thread

The Worst Computer Bugs in History: Race conditions in Therac-25 (blog.bugsnag.com)

~ 6 pts 2 comments by unknown Aug 14, 2018 ~comp Programming (General) thread

Why does the compiler turn my conditional loop into an infinite one? (blogs.msdn.microsoft.com)

L 10 pts 2 comments by calvin Sep 25, 2018 c++ Systems / Low-Level / OS thread

Race Condition vs. Data Race (2011) (blog.regehr.org)

L 1 pts 0 comments by cujanovic Jul 24, 2019 programmingsecurity Programming (General)Security / Privacy thread

A Beautiful Race Condition (2009) (mailinator.blogspot.com)

L 7 pts 0 comments by calvin Sep 25, 2019 javaprogramming Programming (General) thread

Chrome 0-day exploit CVE-2019-13720 used a race condition and a Use-After-Free to install persistent malware on Windows (securelist.com)

~ 10 pts 0 comments by unknown Nov 2, 2019 ~comp Programming (General)Security / Privacy thread

Race Conditions/Concurrency Defects in Databases: A Catalogue (ketanbhatt.com)

L 4 pts 0 comments by calvin Jul 4, 2020 databases Data / Databases / Infrastructure thread

Node.js race conditions (nodejsdesignpatterns.com)

L 14 pts 6 comments by loige Jan 25, 2021 javascript Web Development thread

QWaitCondition: Solving the Unavoidable Race (2014) (woboq.com)

L 4 pts 0 comments by hwayne Feb 18, 2021 c++ Systems / Low-Level / OS thread

How we found and fixed a rare race condition in our session handling (github.blog)

L 15 pts 0 comments by zachahn Mar 19, 2021 security Security / Privacy thread

Related to this post from a week ago: https://lobste.rs/s/uaxv9f/github_bug_related_handling

Finding and fixing a rare race-condition in GitHub's session handling (github.blog)

~ 6 pts 0 comments by unknown Mar 19, 2021 ~comp Programming (General) thread

Debugging a race condition in a Node.js test (pernos.co)

L 5 pts 0 comments by glacambre Apr 16, 2021 debugging Web Development Programming (General) thread

Race Conditions Can Be Useful for Parallelism (shwestrick.github.io)

L 10 pts 0 comments by eatonphil Sep 27, 2022 ml Programming Languages / CS Theory thread

Race condition in snap-confine's must_mkdir_and_open_with_perms() (CVE-2022-3328) (qualys.com)

L 3 pts 0 comments by lattera Dec 1, 2022 linuxsecurity Systems / Low-Level / OS Security / Privacy thread

Smashing the state machine: the true potential of web race conditions (portswigger.net)

L 8 pts 0 comments by freddyb Aug 10, 2023 securityweb Web Development Security / Privacy thread