[Full-disclosure] Apple Safari ... DoS Vulnerability
jstarks440 at gmail.com
Tue Mar 3 04:57:27 GMT 2009
Grow up, really.
On Mon, Mar 2, 2009 at 11:41 PM, Valdis' Mustache <
security.mustache at gmail.com> wrote:
> I would like to point out that I have been able to create a "hung"
> state in the Firefox browser by opening 30 simultaneous tabs pointed
> at http://www.welcometointernet.org/lawnmower/ and adding a 31st tab
> viewing http://www.hotrussianbrides.com.
> Also, I am not amused.
> Your humble servant,
> Ze Mustache von Kletnieks
> On Mon, Mar 2, 2009 at 10:29 PM, <bobby.mugabe at hushmail.com> wrote:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> > Dear Nick,
> > You and Thierry Loller are wrong.
> > - -bm
> > On Mon, 02 Mar 2009 21:28:17 -0500 Nick FitzGerald <nick at virus-
> > l.demon.co.uk> wrote:
> >>Chris Evans to Thierry Zoller:
> >>> > Example
> >>> > If a chrome tab can be crashed arbritarely (remotely) it is a
> >>DoS attack
> >>> > but with ridiculy low impact to the end-user as it only
> >>crashes the tab
> >>> > it was subjected to, and not the whole browser or operation
> >>> > But the fact remains that this was the impact of a DoS
> >>> > the tab crashes arbritarily.
> >>> Eh? If you visit www.evil.com and your tab crashes, that's no
> >>But what if www.evil.com has run an injection attack of some kind
> >>XSS in blog comments, etc, etc) against www.stupid.com?
> >>Visitors to stupid.com then suffer a DoS...
> >>Yes, stupid.com should run their site better, fix their myriad XSS
> >>etc, etc.
> >>But this is the Internet, so this "software flaw" can be leveraged
> >>security vulnerability.
> >>I'm with Thierry on this...
> >>Nick FitzGerald
> >>Full-Disclosure - We believe in it.
> >>Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> >>Hosted and sponsored by Secunia - http://secunia.com/
> > -----BEGIN PGP SIGNATURE-----
> > Charset: UTF8
> > Version: Hush 3.0
> > Note: This signature can be verified at https://www.hushtools.com/verify
> > wpwEAQMCAAYFAkmso8YACgkQhNp8gzZx3sj93AP/a+oFmgLbU2Elo0livpG3c6Qvh8+0
> > b69LocD4LJmaR3NR4H7AHZYJiqm1TegwdTvtgY4sZd0lXi5EKZYTJMl9tj2Pd53fxXFm
> > 7eK5yf6oRGggrdOLyDjRkMV3bVnOppwXviMHdk8quxx8sDRxA99ZlKKUA40RXFa5eAhp
> > UpXIZ1s=
> > =zgqd
> > -----END PGP SIGNATURE-----
> > --
> > Become a medical transcriptionist at home, at your own pace.
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> > Hosted and sponsored by Secunia - http://secunia.com/
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
-------------- next part --------------
An HTML attachment was scrubbed...
Full-Disclosure is hosted and sponsored by Secunia.