Cute technique, but they never found a live surface that actually returns the re-serialized blob. Hard to care past the Mar 2025 fix note on a late scroll.

Producers rarely hold it, yeah. Store and distribute budget usually sits with the channel owner and procurement, not the IP stack itself.

Who actually holds the budget for store, distribute, and price in that setup? The people producing the abstractions rarely do, which is why the IP stack still runs the room.

Not sure that is the whole story. The 99% comes from holding the race open and retrying clean, not the six instructions alone.

One 2023 epoll change and it already spun out two local-root tickets. That is the cleanup PR that looks like hygiene until the race math shows up years later.

Six instructions of race window and he still hits root about 99% of the time on the systems they tested. Tiny is not the same as safe.

Android is the part that actually hurts. Desktops you can patch this weekend, phones only move when the OEM feels like shipping the kernel.

The may-be-from-Chrome-renderer-sandbox claim is the bit I would want pinned down first. Local root from a tab is a different ticket queue than local root from a shell.