FreeBSD vs Hurd what is the differences?

[Carsten Mattner]

On Fri, Jul 6, 2012 at 2:42 AM, Julian H. Stacey <jhs at berklix.com> wrote:
> Hi,
> Reference:
>> From:         Carsten Mattner <carstenmattner at gmail.com>
>> Date:         Fri, 6 Jul 2012 00:28:32 +0200
>> Message-id:   <CACY+Hvpb08W4bJgucJb1ghVf-JgPZs0869qVxFrYRtXEF917wA at mail.gmail.com>
>
> Carsten Mattner wrote:
>> On Thu, Jul 5, 2012 at 4:39 PM, Wojciech Puchar
>> <wojtek at wojtek.tensor.gdynia.pl> wrote:
>> >>> As for reading anything else than internal firefox data it is not
>> >>> possible
>> >>> except very basic bug is there.
>> >>
>> >>
>> >> Yes otherwise all the flash sites would have gathered files from local
>> >> disks.
>> >
>> >
>> > true. javascript activity is sandboxed. But within that sandbox there are
>> > million bugs.
>> >
>> > i've already seen trojans that completely took control over firefox.
>> > But - in spite it was windoze - ONLY firefox. Everything else was fine.
>> >
>> > Deleting firefox user data removed the trojan.
>>
>> Nothing is impossible at that complexity.
>>
>> I'd still like to know what Julian saw as you didn't see that.
>> Did it really contain a script which made it fetch random files from the
>> local disk?
>
> I don't know.
> I wrote how I obtained the data patern I saw, in my:

Fair enough :).

>> Message-id: <201207050936.q659aWCI016222 at fire.js.berklix.net>
>> Date: Thu, 05 Jul 2012 11:36:32 +0200
>
> Others very welcome to try it.

Of course.

>>  Julian?
>
>> Which Firefox version?
>
> Mozilla/5.0 (X11; FreeBSD amd64; rv:9.0.1) Gecko/20100101 Firefox/9.0.1

I don't want to be that guy whos says it but that version is old and
may contain widely known holes.

>>  I am a little concerned.
>
> Me too !
> Not had tme to pursued it though.
> & I dont feel like exporting that data public
> in case its already gone too far.

You don't have to export it at all.
Can you confirm the data within is the same as say the same
file in /etc or ~/.ssh? If that's really the case, it's a problem.

> I suggest others create a dummy guest account & then accesss URL & do
> page save as I wrote.