Learn hacking (ad): https://www.hextree.io

What happens in the Pwn2Own disclosure room? Let's find out in part 2 of my short documentary about how Mozilla fixes 0days.

part 1: https://www.youtube.com/watch?v=YQEq5s4SRxY

(Spoilers) Firefox Security Response to pwn2own 2025: https://blog.mozilla.org/security/2025/05/17/firefox-security-response-to-pwn2own-2025/


=[ ❤️ Support ]=

→ My courses: https://www.hextree.io/
→ My font: https://shop.liveoverflow.com/
→ per Video: https://www.patreon.com/join/liveoverflow
→ per Month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join

2nd Channel: https://www.youtube.com/LiveUnderflow

=[ 🐕 Social ]=

→ LinkedIn: https://www.linkedin.com/in/liveoverflow
→ X / Twitter: https://x.com/LiveOverflow/
→ Instagram: https://instagram.com/LiveOverflow/
→ Streaming: https://twitch.tv/LiveOverflow/
→ TikTok: https://www.tiktok.com/@liveoverflow_
→ Blog: https://liveoverflow.com/

LiveOverflow

A documentary-style account of Mozilla's response to a Firefox zero-day exploit demonstrated at Pwn2Own Berlin. Researchers from Palo Alto Networks exploited an out-of-bounds write vulnerability in SpiderMonkey's implementation of Promise.allSettled. The piece follows Mozilla engineers Freddy and decoder through the disclosure room, back to the Mozilla office, and through their incident response process — including bug reproduction, bisection, patch development, and coordination with downstream users like Tor Browser. It also explores the nuances of patching open-source software where landing a commit can signal a security fix to adversaries, and why Mozilla chose to wait for day two exploits before pushing a release.

The First Exploit - Pwn2Own Documentary (Part 2)