[Full-disclosure] Apple Safari ... DoS Vulnerability

[Valdis.Kletnieks at vt.edu]

On Mon, 02 Mar 2009 22:49:41 PST, Chris Evans said:
> So, you have injected HTML into stupid.com, and you choose to inflict
> the fury of a closing tab upon hapless visitors?

If your intent is to cause stupid.com to lose traffic while flying under
the wire, that's a good place to start.  Trashing the hapless visitor's
machine may draw attention to your ruse, but if you can just make it close
up, people will it it 2-3 times, say to themselves "Ah fsck, another lame
broken website" and move on.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20090303/9e103754/attachment.bin