The WebP 0day
Good writeup, thanks for sharing it!And yet another argument for "You ought to be using Qubes."  Random web access needs to be treated as "Genuinely high risk" anymore.  A disposable VM with nothing of value in it for "casual web use" seems the right option for exploring the security hostile environment of "the internet."