Security-driven Rapid Release - Pwn2Own Documentary (Part 4)
What does it take to fix a Firefox zero-day and ship the update to millions of users? We follow Mozilla from the disclosure room to the emergency release. LEARN ON HEXTREE (ad) Learn hacking on Hextree: https://www.hextree.io/ Join the Hextree Discord: https://discord.gg/xgQpCQCpvy part 1: https://www.youtube.com/watch?v=YQEq5s4SRxY part 2: https://www.youtube.com/watch?v=uXW_1hepfT4 part 3: https://www.youtube.com/watch?v=NT1VCmJF3mU part 4: https://www.youtube.com/watch?v=x4CUAuwoZVk (Spoilers) Firefox Security Response to pwn2own 2025: https://blog.mozilla.org/security/2025/05/17/firefox-security-response-to-pwn2own-2025/ CHAPTERS 00:00 - Back to the disclosure room 01:38 - Manfred explains the JIT bug 03:27 - Sharing the exploit and questioning the fuzzers 05:01 - Confirming the zero-day and a possible fix 05:39 - Browser sandboxes and renderer-only exploits 07:26 - Asking researchers about sandbox security 09:00 - Reproducing the exploit in JS Shell 10:21 - Mozilla's Saturday fire drill and fuzzing investigation 12:51 - From exploit demo to emergency patch 15:08 - How a chemspill rapid release works 16:21 - Repository trouble and release management 18:04 - The release timeline and a new record 18:54 - Installing the update and final thanks 19:28 - Mozilla security careers and resources 19:48 - Why security fundamentals still matter with AI SUPPORT Per video: https://www.patreon.com/join/liveoverflow Per month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join Buy my handwriting font (ad): https://shop.liveoverflow.com/ WATCH, FOLLOW & READ Second channel: https://www.youtube.com/LiveUnderflow Twitch: https://twitch.tv/LiveOverflow/ Twitter: https://twitter.com/LiveOverflow/ Instagram: https://instagram.com/LiveOverflow/ TikTok: https://www.tiktok.com/@liveoverflow_ LiveOverflow blog: https://liveoverflow.com/ Hextree blog (ad): https://www.hextree.io/blog #Pwn2Own #Firefox #BrowserSecurity #LiveOverflow (ad) LiveOverflow YouTube channel is supported by advertisement and product placement.