Channel 9 Forums - Coffeehouse - Firefox vunerability "impossible to patch" http://mschnlnine.vo.llnwd.net/d1/Dev/App_Themes/C9/images/feedimage.png Channel 9 Forums - Coffeehouse - Firefox vunerability "impossible to patch" http://channel9.msdn.com/Forums Channel 9 keeps you up to date with the latest news and behind the scenes info from Microsoft that developers love to keep up with. From LINQ to SilverLight – Watch videos and hear about all the cool technologies coming and the people behind them. http://channel9.msdn.com/Forums en Sun, 19 May 2013 04:00:10 GMT Sun, 19 May 2013 04:00:10 GMT Rev9 28 -28 -1 Coffeehouse - Firefox vunerability "impossible to patch" http://news.zdnet.com/2100-1009_22-6121608.html

SAN DIEGO--The open-source Firefox Web browser is critically flawed in the way it handles JavaScript, two hackers said Saturday afternoon.

An attacker could commandeer a computer running the browser simply by crafting a Web page that contains some malicious JavaScript code, Mischa Spiegelmock and Andrew Wbeelsoi said in a presentation at the ToorCon hacker conference here. The flaw affects Firefox on Windows, Apple Computer's Mac OS X and Linux, they said.

"Internet Explorer, everybody knows, is not very secure. But Firefox is also fairly insecure," said Spiegelmock, who in everyday life works at blog company SixApart. He detailed the flaw, showing a slide that displayed key parts of the attack code needed to exploit it.

The flaw is specific to Firefox's implementation of JavaScript, a 10-year-old scripting language widely used on the Web. In particular, various programming tricks can cause a stack overflow error, Spiegelmock said. The implementation is a "complete mess," he said. "It is impossible to patch."

.............

The hackers claim they know of about 30 unpatched Firefox flaws. They don't plan to disclose them, instead holding on to the bugs.

]]> http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/234935#234935 Sun, 01 Oct 2006 21:42:28 GMT http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/234935#234935 blowdart 28 http://channel9.msdn.com/Niners/blowdart/Discussions/RSS Coffeehouse - Firefox vunerability "impossible to patch"
blowdart wrote:
"Internet Explorer, everybody knows, is not very secure."

Ah, blanket statements. Every attention seeker's best friend.

]]> http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/6d6002936e3f43b5b99f9dec0018164b#6d6002936e3f43b5b99f9dec0018164b Sun, 01 Oct 2006 22:13:07 GMT http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/6d6002936e3f43b5b99f9dec0018164b#6d6002936e3f43b5b99f9dec0018164b Sven Groot 28 http://channel9.msdn.com/Niners/Sven Groot/Discussions/RSS Coffeehouse - Firefox vunerability "impossible to patch" OMG... those hackers are complete idiots!

"The hackers claim they know of about 30 unpatched Firefox flaws. They don't plan to disclose them, instead holding on to the bugs."

Mozilla's respose:

"I do hope you guys change your minds and decide to report the holes to us and take away $500 per vulnerability instead of using them for botnets."

Hacker's response:

"It is a double-edged sword, but what we're doing is really for the greater good of the Internet, we're setting up communication networks for black hats."

My response:

30 * 500 = $15,000

Those two hackers could have scored $15,000 to share amongst themselves by simply disclosing information about their findings.


Regards,
Vincent

]]> http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/2e2b306ee3d54504b85a9dec0018170f#2e2b306ee3d54504b85a9dec0018170f Sun, 01 Oct 2006 23:04:29 GMT http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/2e2b306ee3d54504b85a9dec0018170f#2e2b306ee3d54504b85a9dec0018170f Xaero_Vincent 28 http://channel9.msdn.com/Niners/Xaero_Vincent/Discussions/RSS Coffeehouse - Firefox vunerability "impossible to patch" I wonder how long until there is a flaw in the wild.

]]> http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/6437e8b84382433695e29dec0018173c#6437e8b84382433695e29dec0018173c Sun, 01 Oct 2006 23:07:52 GMT http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/6437e8b84382433695e29dec0018173c#6437e8b84382433695e29dec0018173c Jason Cox 28 http://channel9.msdn.com/Niners/Jason Cox/Discussions/RSS Coffeehouse - Firefox vunerability "impossible to patch"
Xaero_Vincent wrote:
"It is a double-edged sword, but what we're doing is really for the greater good of the Internet, we're setting up communication networks for black hats."


A slight contradiction, surely?

]]> http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/d96f01107ae9450e97019dec0018176b#d96f01107ae9450e97019dec0018176b Sun, 01 Oct 2006 23:10:22 GMT http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/d96f01107ae9450e97019dec0018176b#d96f01107ae9450e97019dec0018176b W3bbo 28 http://channel9.msdn.com/Niners/W3bbo/Discussions/RSS Coffeehouse - Firefox vunerability "impossible to patch"
W3bbo wrote:
A slight contradiction, surely?


Indeed. They are consciously admitting to engagement in illegal activities and  suggesting that users ought to feel privileged to be exploited by them and their affiliates.


Regards,
Vincent

]]> http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/7153e2df7afd496eb36d9dec0018179a#7153e2df7afd496eb36d9dec0018179a Sun, 01 Oct 2006 23:38:31 GMT http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/7153e2df7afd496eb36d9dec0018179a#7153e2df7afd496eb36d9dec0018179a Xaero_Vincent 28 http://channel9.msdn.com/Niners/Xaero_Vincent/Discussions/RSS Coffeehouse - Firefox vunerability "impossible to patch"
Xaero_Vincent wrote:

OMG... those hackers are complete idiots!

<snip>

My response:

30 * 500 = $15,000

Those two hackers could have scored $15,000 to share amongst themselves by simply disclosing information about their findings.


Regards,
Vincent


The problem with your response that $15,000 for 30 exploits is basically nothing between two people. A given browser exploit for IE supposedly has a street value of $10,000. Assuming FireFox exploits are about the same in price, they make 20x by holding them back from MoFo.

Not quite idiotic to hold them back if you have loose ethics. I doubt they have 30 exploits, but they probably take a great deal of pleasure making people with a (smug) sense of security scared again.

Side note: IMO, they should be responsible and disclose them.

]]> http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/ba1b9d1a05364461ab169dec001817cc#ba1b9d1a05364461ab169dec001817cc Mon, 02 Oct 2006 00:16:58 GMT http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/ba1b9d1a05364461ab169dec001817cc#ba1b9d1a05364461ab169dec001817cc petknep_home 28 http://channel9.msdn.com/Niners/petknep_home/Discussions/RSS Coffeehouse - Firefox vunerability &quot;impossible to patch&quot;
Jason Cox wrote:
I wonder how long until there is a flaw in the wild.


In the mean time simply use NoScript to block JavaScript from being run on sites that you don't trust.

]]> http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/b22e05ab9844421c8db89dec00181815#b22e05ab9844421c8db89dec00181815 Mon, 02 Oct 2006 01:07:49 GMT http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/b22e05ab9844421c8db89dec00181815#b22e05ab9844421c8db89dec00181815 Grumpy 28 http://channel9.msdn.com/Niners/Grumpy/Discussions/RSS Coffeehouse - Firefox vunerability &quot;impossible to patch&quot; Reminds me of a story about two Security guys who found a flaw in wifi cards that can hack any OS, they even demo'd it a mac laptop.

Funny they had the same sort of statement, "we have found a real flaw but we don't want to tell people about it...." Bull<cough!>

Since Mozilla are looking at all the code for JavaScript to see if there is an issue then if it exists there's a god chance it will be fixed soon.

]]> http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/2c4afc0761704c0b9f969dec00181845#2c4afc0761704c0b9f969dec00181845 Mon, 02 Oct 2006 07:57:27 GMT http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/2c4afc0761704c0b9f969dec00181845#2c4afc0761704c0b9f969dec00181845 Another_Darren 28 http://channel9.msdn.com/Niners/Another_Darren/Discussions/RSS Coffeehouse - Firefox vunerability &quot;impossible to patch&quot;
blowdart wrote:
http://news.zdnet.com/2100-1009_22-6121608.html

The flaw is specific to Firefox's implementation of JavaScript, a 10-year-old scripting language widely used on the Web. In particular, various programming tricks can cause a stack overflow error, Spiegelmock said. The implementation is a "complete mess," he said. "It is impossible to patch."



Isn't this a good reason to throw out the old implementation of javascript and start with a new one, that doesn't have these flaws?
I think that would be a better idea than waiting for the hackers to use the holes for their blackhat communication framework, but that's just me Wink

]]> http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/a7c584d6cb3c4986901c9dec0018187a#a7c584d6cb3c4986901c9dec0018187a Mon, 02 Oct 2006 08:11:20 GMT http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/a7c584d6cb3c4986901c9dec0018187a#a7c584d6cb3c4986901c9dec0018187a Willem Meints 28 http://channel9.msdn.com/Niners/WillemM/Discussions/RSS Coffeehouse - Firefox vunerability &quot;impossible to patch&quot; When does software become impossible to patch ?

These sort of statements always intrigue me.

]]> http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/c9037f17799c407b858b9dec001818a9#c9037f17799c407b858b9dec001818a9 Mon, 02 Oct 2006 08:12:47 GMT http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/c9037f17799c407b858b9dec001818a9#c9037f17799c407b858b9dec001818a9 MB 28 http://channel9.msdn.com/Niners/MB/Discussions/RSS Coffeehouse - Firefox vunerability &quot;impossible to patch&quot;
WillemM wrote:

Isn't this a good reason to throw out the old implementation of javascript and start with a new one, that doesn't have these flaws?



I'd rather hear that it is impossible to patch from a FF dev rather than the hacker, given the fact they are not oblivious of the effects of over-generalisation (IE is insecure blah blah) then they may also be prone to overexageration.


]]> http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/de24113f12df4ca79af09dec001818d8#de24113f12df4ca79af09dec001818d8 Mon, 02 Oct 2006 09:47:05 GMT http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/de24113f12df4ca79af09dec001818d8#de24113f12df4ca79af09dec001818d8 Rossj 28 http://channel9.msdn.com/Niners/Rossj/Discussions/RSS Coffeehouse - Firefox vunerability &quot;impossible to patch&quot;
jaylittle wrote:

Another_Darren wrote: Reminds me of a story about two Security guys who found a flaw in wifi cards that can hack any OS, they even demo'd it a mac laptop.

Yeah and they were pretty much totally full of it.  The demo was done using a third party USB wireless device with a third party driver.  Hence by default Apple had nothing to do with it since the security hole was on the driver level.
I'm not sure how they are full of it, didn't they state the above in the video Perplexed

]]> http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/b6300db9c10044bb94a89dec00181909#b6300db9c10044bb94a89dec00181909 Mon, 02 Oct 2006 14:56:45 GMT http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/b6300db9c10044bb94a89dec00181909#b6300db9c10044bb94a89dec00181909 Jonathan Merriweather 28 http://channel9.msdn.com/Niners/Cyonix/Discussions/RSS Coffeehouse - Firefox vunerability &quot;impossible to patch&quot; On the plus side that fact that they refused to give Apple any information, even though claiming it was also possible with the Airport drivers, forced Apple to do a security audit and found two other issues Smiley

]]> http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/10bb3c3883704efcaa549dec00181938#10bb3c3883704efcaa549dec00181938 Mon, 02 Oct 2006 15:14:07 GMT http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/10bb3c3883704efcaa549dec00181938#10bb3c3883704efcaa549dec00181938 Rossj 28 http://channel9.msdn.com/Niners/Rossj/Discussions/RSS Coffeehouse - Firefox vunerability &quot;impossible to patch&quot; Sanctimonious bull-crap!

Credibility -1

Report the bugs for the good of the community, don't muck about.

I hate all this "I'm not going to tell you because I've got some power over you".

Black Hats? Who are they ... peers? Criminals? Bank-manager? Granny? I smell a rat.

I'm annoyed now, ones things for sure it won't stop me from using Firefox, but it doesn't make me feel comfortable about using it either.

Give me the hackers address, time to tell them exactly what I think of them!

If only they lived in London ... I would knock on there doors, I really would!




]]> http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/0659dc1f12c448bd81729dec00181968#0659dc1f12c448bd81729dec00181968 Mon, 02 Oct 2006 15:57:01 GMT http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/0659dc1f12c448bd81729dec00181968#0659dc1f12c448bd81729dec00181968 David Oliver 28 http://channel9.msdn.com/Niners/Sabot/Discussions/RSS Coffeehouse - Firefox vunerability &quot;impossible to patch&quot;
petknep_home wrote:

Side note: IMO, they should be responsible and disclose them.


Especially when a company that you work for is disclosed in the article

"who in everyday life works at blog company SixApart"

]]> http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/a3f31bd210d94d3098dd9dec00181996#a3f31bd210d94d3098dd9dec00181996 Mon, 02 Oct 2006 15:58:37 GMT http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/a3f31bd210d94d3098dd9dec00181996#a3f31bd210d94d3098dd9dec00181996 Cybermagellan 28 http://channel9.msdn.com/Niners/Cybermagellan/Discussions/RSS Coffeehouse - Firefox vunerability &quot;impossible to patch&quot;
Cybermagellan wrote:

petknep_home wrote:
Side note: IMO, they should be responsible and disclose them.


Especially when a company that you work for is disclosed in the article

"who in everyday life works at blog company SixApart"


I bet their website is getting bombarded. Lots of free advertising?

]]> http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/77d9e0a17a57407eb5619dec001819c5#77d9e0a17a57407eb5619dec001819c5 Mon, 02 Oct 2006 16:02:29 GMT http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/77d9e0a17a57407eb5619dec001819c5#77d9e0a17a57407eb5619dec001819c5 phreaks 28 http://channel9.msdn.com/Niners/phreaks/Discussions/RSS Coffeehouse - Firefox vunerability &quot;impossible to patch&quot; Well looks like the black hatters don't have long to brag about their big find in FF.

http://forums.mozillazine.org/viewtopic.php?t=469982

Some JS bug fixes in and a new bug raised over the claims;

https://bugzilla.mozilla.org/show_bug.cgi?id=355069

Shows they have managed to recreate the flaw.

I personally think if you found such a serious flaw and planned to use to for gain (personal network for black hatters for example) then you wouldn't brag about it!  I think it's a personal PR stunt.

]]> http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/6f6bddc8f33c436da4db9dec001819f5#6f6bddc8f33c436da4db9dec001819f5 Mon, 02 Oct 2006 19:49:33 GMT http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/6f6bddc8f33c436da4db9dec001819f5#6f6bddc8f33c436da4db9dec001819f5 Another_Darren 28 http://channel9.msdn.com/Niners/Another_Darren/Discussions/RSS Coffeehouse - Firefox vunerability &quot;impossible to patch&quot;
petknep_home wrote:

The problem with your response that $15,000 for 30 exploits is basically nothing between two people. A given browser exploit for IE supposedly has a street value of $10,000. Assuming FireFox exploits are about the same in price, they make 20x by holding them back from MoFo.

Not to mention that they have jobs. Well at least Mischa Spiegelmock does. Maybe he will change his mind after Six Apart fires him. I can't imagine any business trusting a company that knowingly employs  blackhat hackers.

]]> http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/80d04963d70b4fa6a51c9dec00181a24#80d04963d70b4fa6a51c9dec00181a24 Mon, 02 Oct 2006 21:35:41 GMT http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/80d04963d70b4fa6a51c9dec00181a24#80d04963d70b4fa6a51c9dec00181a24 Oberon 28 http://channel9.msdn.com/Niners/Oberon/Discussions/RSS Coffeehouse - Firefox vunerability &quot;impossible to patch&quot; Apparently this is a hoax. I hate to think how much dev time this might have wasted, and can imagine how upset a corporate might be if someone pulled this one and they wasted hours or days looking for a bug that was already known about.

]]> http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/1ae34ae319564a9e9e779dec00181a54#1ae34ae319564a9e9e779dec00181a54 Tue, 03 Oct 2006 17:43:52 GMT http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/1ae34ae319564a9e9e779dec00181a54#1ae34ae319564a9e9e779dec00181a54 Rossj 28 http://channel9.msdn.com/Niners/Rossj/Discussions/RSS Coffeehouse - Firefox vunerability &quot;impossible to patch&quot;
Rossj wrote:
Apparently this is a hoax. I hate to think how much dev time this might have wasted, and can imagine how upset a corporate might be if someone pulled this one and they wasted hours or days looking for a bug that was already known about.


Hoax or not, it doesn't mean that the implementation of JavaScript in FF is not almost impossible to patch.

Rotem

]]> http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/dfacbb4032f046bfb1d99dec00181a84#dfacbb4032f046bfb1d99dec00181a84 Tue, 03 Oct 2006 18:12:21 GMT http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/dfacbb4032f046bfb1d99dec00181a84#dfacbb4032f046bfb1d99dec00181a84 Rotem Kirshenbaum 28 http://channel9.msdn.com/Niners/Rotem Kirshenbaum/Discussions/RSS Coffeehouse - Firefox vunerability &quot;impossible to patch&quot;
Rotem Kirshenbaum wrote:

Rossj wrote:Apparently this is a hoax. I hate to think how much dev time this might have wasted, and can imagine how upset a corporate might be if someone pulled this one and they wasted hours or days looking for a bug that was already known about.


Hoax or not, it doesn't mean that the implementation of JavaScript in FF is not almost impossible to patch.

Rotem


I think the fact that the FF devs have already 'patched' the problem proves otherwise Wink

]]> http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/aafcab7ccc8f42b3b50a9dec00181ab5#aafcab7ccc8f42b3b50a9dec00181ab5 Tue, 03 Oct 2006 18:16:11 GMT http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/aafcab7ccc8f42b3b50a9dec00181ab5#aafcab7ccc8f42b3b50a9dec00181ab5 Rossj 28 http://channel9.msdn.com/Niners/Rossj/Discussions/RSS Coffeehouse - Firefox vunerability &quot;impossible to patch&quot;
Rotem Kirshenbaum wrote:

Rossj wrote:Apparently this is a hoax. I hate to think how much dev time this might have wasted, and can imagine how upset a corporate might be if someone pulled this one and they wasted hours or days looking for a bug that was already known about.


Hoax or not, it doesn't mean that the implementation of JavaScript in FF is not almost impossible to patch.

Rotem


Wow, you laid it out with all the facts...  "doesn't mean", "not almost"

]]> http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/66a93d04a0ee4cd18a279dec00181ae5#66a93d04a0ee4cd18a279dec00181ae5 Tue, 03 Oct 2006 18:27:44 GMT http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/66a93d04a0ee4cd18a279dec00181ae5#66a93d04a0ee4cd18a279dec00181ae5 Another_Darren 28 http://channel9.msdn.com/Niners/Another_Darren/Discussions/RSS Coffeehouse - Firefox vunerability &quot;impossible to patch&quot;
Another_Darren wrote:

Rotem Kirshenbaum wrote: 
Rossj wrote: Apparently this is a hoax. I hate to think how much dev time this might have wasted, and can imagine how upset a corporate might be if someone pulled this one and they wasted hours or days looking for a bug that was already known about.


Hoax or not, it doesn't mean that the implementation of JavaScript in FF is not almost impossible to patch.

Rotem


Wow, you laid it out with all the facts...  "doesn't mean", "not almost"


I'm not saying that it's a fact.
Let me explain: "A is true and B is true". Just because A isn't true doesn't mean the B is false also Smiley

Heck, I don't know if the JS implementation in Mozilla is a mess or not. If t's really a 10-year old code, than it probably is. Or maybe it's not (tautology rocks ! Tongue Out ).

Rotem

]]> http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/2c081efe8427450385f49dec00181b18#2c081efe8427450385f49dec00181b18 Tue, 03 Oct 2006 19:43:44 GMT http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/2c081efe8427450385f49dec00181b18#2c081efe8427450385f49dec00181b18 Rotem Kirshenbaum 28 http://channel9.msdn.com/Niners/Rotem Kirshenbaum/Discussions/RSS Coffeehouse - Firefox vunerability &quot;impossible to patch&quot; Here we go.

Alleged hacker wrote:

The main purpose of our talk was to be humorous.
...
I have not succeeded in making this code do anything more than cause a crash and eat up system resources, and I certainly haven’t used it to take over anyone else’s computer and execute arbitrary code.

]]> http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/114236c053b24cea9fcf9dec00181b48#114236c053b24cea9fcf9dec00181b48 Tue, 03 Oct 2006 20:40:28 GMT http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/114236c053b24cea9fcf9dec00181b48#114236c053b24cea9fcf9dec00181b48 Rossj 28 http://channel9.msdn.com/Niners/Rossj/Discussions/RSS Coffeehouse - Firefox vunerability &quot;impossible to patch&quot;
Rossj wrote:
Here we go.

Alleged hacker wrote:
The main purpose of our talk was to be humorous.
...
I have not succeeded in making this code do anything more than cause a crash and eat up system resources, and I certainly haven’t used it to take over anyone else’s computer and execute arbitrary code.


What's everybody upset about? It was all a joke. <insert eye rolling icon here>

]]> http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/839a165391664143abb69dec00181b78#839a165391664143abb69dec00181b78 Tue, 03 Oct 2006 21:01:20 GMT http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/839a165391664143abb69dec00181b78#839a165391664143abb69dec00181b78 Oberon 28 http://channel9.msdn.com/Niners/Oberon/Discussions/RSS Coffeehouse - Firefox vunerability &quot;impossible to patch&quot; Ya, I am being larfing so much I am being making wetting of the pants.

]]> http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/1a1b1b31c9d64ea1925d9dec00181ba6#1a1b1b31c9d64ea1925d9dec00181ba6 Wed, 04 Oct 2006 03:15:18 GMT http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/1a1b1b31c9d64ea1925d9dec00181ba6#1a1b1b31c9d64ea1925d9dec00181ba6 MB 28 http://channel9.msdn.com/Niners/MB/Discussions/RSS Coffeehouse - Firefox vunerability &quot;impossible to patch&quot;
MB wrote:
Ya, I am being larfing so much I am being making wetting of the pants.


?

Larfing?

]]> http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/4b7a57806e994b3cbe609dec00181bd5#4b7a57806e994b3cbe609dec00181bd5 Wed, 04 Oct 2006 03:19:12 GMT http://channel9.msdn.com/Forums/Coffeehouse/234935-Firefox-vunerability-quotimpossible-to-patchquot/4b7a57806e994b3cbe609dec00181bd5#4b7a57806e994b3cbe609dec00181bd5 JonathonW 28 http://channel9.msdn.com/Niners/CannotResolveSymbol/Discussions/RSS