61 points auberonedu 4 hours ago 38 comments

ilnmtlbnm 4 hours ago | parent

Amazing!

I encountered the same type of death freeze when trying (and failing) to run models in browser tabs, but didn't spend much time trying to understand how severe it is.

Hope they don't disable WebGPU...

fuzzfactor 3 hours ago | parent

Maybe that would be better than a meltdown . . .

selectodude 1 hour ago | parent

Zero impact on iOS 27.

iAMkenough 1 hour ago | parent

Still impacts macOS 27 release candidate.

layer8 42 minutes ago | parent

It’s not an iOS bug to begin with.

skinfaxi 26 minutes ago | parent

The title says "freeze a mac".

embedding-shape 23 minutes ago | parent

Tried it on my Blackberry too, also nothing. I say it's a nothingburger.

hyperhello 1 hour ago | parent

The code is just an infinite loop counter. You can cause all kinds of Safari issues with an infinite loop in JavaScript too, which is sure annoying when trying to figure out large codebases. There was a student in Japan who showed that you could do this trivially and they were arrested.

SahAssar 1 hour ago | parent

Usually you can't freeze the whole system UI with an infinite counter though. I'm pretty sure normal JS browser processes are not supposed to be able to do that.

LoganDark 29 minutes ago | parent

It only froze Safari tabs for me. Not even Safari's own UI except for the web pages themselves.

It did do it to all tabs though.

hyperhello 33 minutes ago | parent

Why does everyone hate this comment? Attitude? I can’t figure out the wavelength here. I’m just commenting.

LoganDark 28 minutes ago | parent

An infinite loop in JavaScript causes a different issue. It doesn't cause the rest of your tabs to stop working too. Or allegedly the entire rest of the OS though I can't reproduce that.

JumpCrisscross 26 minutes ago | parent

> Why does everyone hate this comment?

"It's just" dismissals are annoying when they're blatantly wrong. An infinite-loop counter in Orion.app shouldn't cause my entire machine to freeze, down to being unable to force quit.

StilesCrisis 22 minutes ago | parent

Because kernel panics are a wildly different class of bug than breaking one browser tab. An "Oh Snap" is the designed outcome of a JavaScript infinite loop. Crashing the whole computer is not.

demibabs 22 minutes ago | parent

"It's just" is usually an annoying way to start a comment.

mikestew 29 minutes ago | parent

There's more to it than just a loop. If it was just a loop, it would peg a CPU core and be done with it. But you'll have to reread TFA to find out how it takes out the window server, thus freezing the rest of the system.

StilesCrisis 24 minutes ago | parent

Blowing up a browser tab with bad JavaScript is not considered to be a problem. But kernel panicking the computer is different--this brings us back to the bad old days of MacOS where a buggy program could force a freeze/restart at any time.

monster_truck 57 minutes ago | parent

Remember when that unicode string nuked iOS 7 and you could set it as your SSID to get them stuck in a loop? good times.

LoganDark 31 minutes ago | parent

Kinda reminds me of that wifi network with a funky name from Doctor Who that gets you uploaded to the cloud. (episode: The Bells of Saint John)

TedDoesntTalk 49 minutes ago | parent

Is this why Oregon Trail Deluxe freezes on Mac?

https://oregontrail.ws/games/the-oregon-trail-deluxe/play/

sgentle 47 minutes ago | parent

Could be a useful way to force user-interaction-gated flows. A "your computer is infected, click this button in 10 seconds or it will crash" type button which, at this point, most modestly-knowledgeable users would know not to click. However, after seeing their computer actually crash when the countdown hits 0, perhaps they would be more inclined to click "allow" on whatever prompt follows when they see it again.

Of course, plenty of other uses. Disable your adblocker or we crash your computer. Watch the whole ad or we crash your computer. Click the follow button or we crash your computer.

Maybe I'm crazy, but "crash your computer" as a building block seems powerful enough to be a security issue. Is denial of service not a security thing anymore?

slicendice 43 minutes ago | parent

I want to click it so bad, but I can't bring myself to do it.

LoganDark 30 minutes ago | parent

For me it just caused Safari to stop working until I quit and restarted it.

embedding-shape 24 minutes ago | parent

A Denial of Browsing attack.

bittercynic 21 minutes ago | parent

On my M1 MacBook Air with MacOS 12 it hangs. The mouse pointer still moves, but I can't bring up the force quit dialogue, and couldn't get anything else to work either. A youtube video in another tab kept playing until I held the power button to force a shutdown.

LoganDark 20 minutes ago | parent

I'm using macOS 27.0 RC on M4 Max

willio58 6 minutes ago | parent

After a long day at work I saw the page, saw the warning to not click it, and I proceeded to click it lol.

Locked up my entire M1 Macbook Pro, held power button and I was back into chrome in <20s but I did kinda go "why did I just do that?"

LoganDark 32 minutes ago | parent

Apple Silicon Macs have a lot of GPU problems. I find that after running any significant GPU workload, the entire operating system starts getting super slow until a reboot. Even if the entire process tree that ever touched the GPU has been completely terminated for days.

itstrueitried 29 minutes ago | parent

    while (true) console.log('this will freeze/crash dev tools') 
For more of a "I've been hacked!" effect, load infinite 3D models in Three.js that have millions of vertices each. You get those black boxes where the system has so low RAM it can't even draw the browser window.

anakaine 25 minutes ago | parent

Shall we term this a Denial of Memory attack. Then in order to Contain it we have a ConDoM fix?

LoganDark 20 minutes ago | parent

This doesn't even work unless you log two different messages, because DevTools will just keep a running count of how many of the same message there has been in a row.

yesitdoes22 4 minutes ago | parent

fwiw it froze my tab in seconds just pasting that into dev tools

xoa 18 minutes ago | parent

While I'm sure it has its uses, particularly if someone really does want to game or do complex computational stuff purely within a web browser, I'll admit I've grown pretty cautious/tired around the ever increasing amount of hardware attack surface area the browser vendors seem to be rushing to expose as Google in particular appears determined to try to be the "operating system on the operating system" as much as it can. In this particular case it made me realize I'd awhile ago set dom.webgpu.enabled and pdfjs.enableWebGPU to false in Firefox, same as I disabled WebGL. Kinda figured if I ever saw something ultra cool I could enable it just that one time but so far I haven't. Semi-related, reviewing the available settings now for the first time in a bit I notice they have a dom.webgpu.blocked-domains with the sole entries being "easyeda.com,*.easyeda.com", I wonder what that's about?

StilesCrisis 7 minutes ago | parent

With Chromebooks, Chrome is in fact put in the position of being a real operating system and is the only surface exposing the hardware's capabilities!

krackers 13 minutes ago | parent

>This spills over into other processes wanting to use the GPU, namely the WindowServer.

Why does this spill over? Unlike CPU which is multiplexed by the kernel's scheduler (so infinite loops can't lock out other programs), is the GPU not multiplexed in the same fashion?

kimixa 7 minutes ago | parent

Often not in the same way - even if there are multiple queues (that can be given a priority), they're often limited in what they can schedule between.

Often there's shared resources that are statically allocated to shaders (register space, local memory etc.) that means you often can't "just" add a new task if those shared resources are already in use. But not using those resources to their full would cause performance issues.

And the internal state of a GPU is often very large, much larger than a CPU, so suspending the current tasks, saving out their state and replace it with a "higher priotity" one can be very expensive - so often an afterthought of support at best.

StilesCrisis 8 minutes ago | parent

Metal is based on C++14, which means you can write Duff's Device in a shader. I've tried it on various Macs and it causes all sorts of critical failures in the compiler, but never an actual kernel panic. (It's pretty trivial to reproduce in KodeLife)