Solid writeup - Actually an enjoyable read about solving a problem with zero documentation but plenty of tenacity.
269 karma · joined November 15, 2016
True words. This post is actually a very good enumeration of the status quo for this debacle.
To be fair, GOV.FR did recently move to all open source software utilisation.
Seems like a sensible idea.
Keen to see if they are doing something SynthID-esque?
https://www.theregister.com/security/2026/07/28/def-con-bans...
But the fact that nobody else who made it through had an exploit and claimed $$$ on Firefox tells me that improvements were made.
And this is what blew my mind, personally; a _browser_ - huge, complicated target codebase with myriad features, many of which are 'on the internet' - didn't have any disclosures with money on the table. That's definitely a datapoint worth registering. But you're absolutely right to remain skeptical!