Experimental technical writing at the edge of security research.https://sidechannels.pub/en-ushttps://sidechannels.pub/posts/cve-2024-0519-rca/https://sidechannels.pub/posts/cve-2024-0519-rca/An in-the-wild Chrome renderer 0-day patched January 2024 — no public root cause analysis for two years. This RCA traces it to a TOCTOU race in V8's JIT constant-folding pipeline → type confusion (`PropertyConstness::kConst` invariant violation) → OOB read/write. Invisible to JavaScript probes; only reproduces with a C++ harness.Wed, 29 Apr 2026 00:00:00 GMTRCAv8chromecve-2024-0519rcarace-conditiontype-confusionitwvulnerability-researchhttps://sidechannels.pub/posts/severity-inflation-quality-gate/https://sidechannels.pub/posts/severity-inflation-quality-gate/AI scales the cost of producing a vulnerability report toward zero faster than it scales the cost of producing a correctly-scoped one. Spence's signaling cost asymmetry collapses as a result. This post documents the inflation antipatterns, the six-check quality gate, and the AI-side adversarial enforcement structure one researcher built in response.Mon, 13 Apr 2026 00:00:00 GMTESSAYvulnerability-disclosuresignaling-theoryai-securitybug-bountyquality-gateseverity-inflationanthropic-mythos