lists.zerezo.com
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
***BOGO*** RE: [PHP] Google Chrome
- Date: Fri, 5 Sep 2008 08:13:57 -0500
- From: "Boyd, Todd M." <tmboyd1@xxxxxxxx>
- Subject: ***BOGO*** RE: [PHP] Google Chrome
> -----Original Message-----
> From: Jochem Maas [mailto:jochem@xxxxxxxxxxxxx]
> Sent: Friday, September 05, 2008 6:53 AM
> To: Robert Cummings
> Cc: Bastien Koert; Dan Shirah; eugenem@xxxxxxxxxxxxx; List_PHP_General
> Subject: Re: [PHP] Google Chrome
>
> Robert Cummings schreef:
> > On Fri, 2008-09-05 at 03:15 +0200, Jochem Maas wrote:
> >> Bastien Koert schreef:
> >>> On Thu, Sep 4, 2008 at 5:22 PM, Jochem Maas <jochem@xxxxxxxxxxxxx>
> wrote:
> >>>
> >>>> Bastien Koert schreef:
> >>>>
> >>>>> On Thu, Sep 4, 2008 at 4:31 PM, Dan Shirah <mrsquash2@xxxxxxxxx>
> wrote:
> >>>>>
> >>>>> Yippie, Chrome already exploited for DoS attacks?
> >>>>>> http://blogs.zdnet.com/security/?p=1847&tag=nl.e539
> >>>>>>
> >>>>>>
> >>>>> Its not a DoS, its just a browser crash
> >>>>>
> >>>> so forcing a browser to crash is not 'Denial of Service'?
> >>>>
> >>>> I think your confused with DDoS
> >>>>
> >>>>
> >>> DDoS is a Distributed Denial of Service attack where a server is
> attacked
> >>> via multiple computers (like a bot net) at the same time AFAIK
> >> no shit. so if you drop the 'Distributed' you get 'Denial of
> Service'. DoS
> >> is rather general, code that keeps crashing your browser on purpose
> is denying
> >> you the service it provides (viewing webpages).
> >>
> >> rather like someone running off with your girlfriend ... you get
> denied service.
> >
> > I thought Chrome was set up so if your current page caused a crash
> other
> > loaded pages didn't crash also. In which case DoS doesn't apply if
> only
> > the requested page crashes since you're still getting service.
>
> yes, and somebody already showed how to crash the whole damn app.
> type 'evil:%', for example, into the addressbar IIRC
Yep, that'll do it. As soon as you type the %, it crashes. Anything
followed by ":%" seems to do it.
Also FWIW, I've crashed it with 5 tabs open when I tried to close one of
the tabs. Clicking the option to restart Chrome brought it back up with
all 5 tabs. Again, when I tried to close one, it crashed and reinstated
all 5 upon restart... ad nauseum.
Maybe I'm picky... but if a newly-released beta program crashes in the
first minute or two that I'm playing with, it proooooobably wasn't ready
for beta in the first place. My 2c.
Todd Boyd
Web Programmer
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php