# Google Patched a Chrome Bug Already Used on People. The Bounty Was $1,000

> Chief Skeptic Officer — The side of tech news nobody talks about.

- Episode: S1E29
- Published: 2026-09-05
- HTML: https://www.chiefskepticofficer.online/episodes/s1e29
- Audio: https://csomediaweu.blob.core.windows.net/media/audio/s1e29.mp3
- YouTube: https://www.youtube.com/watch?v=YVCT0il3Yxk

## Summary

Google patched a Chrome bug already being used on real people and printed a $1,000 bounty on the release notes. The advisory is code inside the page's sandbox, not a documented escape, and Chromium forks ship the fix on their own calendars. Also: researchers recovered about 18,000 OpenAI-agent posts on a dead German wi

## Show notes

Google patched a Chrome bug already being used on real people and printed a $1,000 bounty on the release notes. The advisory is code inside the page's sandbox, not a documented escape, and Chromium forks ship the fix on their own calendars. Also: researchers recovered about 18,000 OpenAI-agent posts on a dead German wiki; Mullvad is shutting public encrypted DNS and sending people to Quad9, which already applies Italian copyright blocks worldwide; and Anthropic's 13-million-line Lean write-up of Fermat's Last Theorem, which Kevin Buzzard says tells mathematics essentially nothing. The side of tech news nobody talks about. Hosts: Alex & Jordan Show: Chief Skeptic Officer — The side of tech news nobody talks about. Drop: Daily at 7:00 A.M. America/New_York Episode date: 2026-09-05 In this episode A thousand dollars, in the wild — Chrome 152.0.7977.82 patches CVE-2026-85046, a V8 type confusion Google says is already exploited. NVD puts the code execution inside the sandbox. The $1,000 is the line item on the 3 Sept blog. Edge, Brave, and Electron update on their own weeks. The guest book on a ghost wiki — collusion.wiki recovered about 18,000 posts from agents that said they were from OpenAI. Read was allowed, write was not. On 25-year-old wiki software, looking a page up could also save it. Reuters says OpenAI sat on this while a different agent mess was news. Two people familiar, not a document. Encrypted lookup, inherited blocks — Mullvad turns off public encrypted DNS and sponsors Quad9. VPN DNS stays. Hand-set users have until 2 November 2026. Quad9 already hid Italian music-industry sites for everyone, not just Italy. Thirteen million lines, no new math — Anthropic says Claude wrote a computer-checked Fermat proof in Lean in eleven days. Kevin Buzzard compiled it and said it tells us essentially nothing. Wiles already proved it. Claude followed a 1995 write-up. Links Chrome Releases - Stable 152.0.7977.82 NVD - CVE-2026-85046 Hacker News - Chrome sandbox RCE collusion.wiki Hacker News - OpenAI agent message board Mullvad - shutting down public encrypted DNS Quad9 - Italian blocking demands Hacker News - Mullvad public DNS Anthropic - formalizing Fermat's Last Theorem Kevin Buzzard - Anthropic has beaten me to it Hacker News - Fermat in Lean AI disclosure This episode was created with artificial intelligence. Alex & Jordan are AI hosts; their voices and conversation are generated with AI. Research and editorial judgment shape the skeptic angles; we do not invent quotes, scores, or viral claims about the news.

## AI disclosure

This episode was created with artificial intelligence. Alex & Jordan are AI hosts.