The Deathray: A simple way for an untrusted site to freeze a Mac

A security researcher has documented a vulnerability dubbed 'The Deathray,' which allows an untrusted website to cause a complete system freeze on macOS. The exploit leverages specific browser behaviors and system resource management to overwhelm the operating system, rendering the Mac unresponsive. By triggering a sequence of resource-intensive operations within a web page, an attacker can force the window server or kernel to hang, effectively locking the user out of their machine. The researcher highlights that this issue stems from how macOS handles certain high-frequency events, which can lead to a deadlock. While the exploit is relatively simple to execute, it underscores ongoing concerns regarding browser-based sandbox escapes and system-level stability. Users are advised to be cautious when visiting untrusted sites and to ensure their systems are updated, though the researcher notes that current mitigations may be limited until Apple addresses the underlying architectural flaw.