FreeBSD vs Hurd what is the differences?
carstenmattner at gmail.com
Fri Jul 6 12:47:45 UTC 2012
On Fri, Jul 6, 2012 at 2:42 AM, Julian H. Stacey <jhs at berklix.com> wrote:
>> From: Carsten Mattner <carstenmattner at gmail.com>
>> Date: Fri, 6 Jul 2012 00:28:32 +0200
>> Message-id: <CACY+Hvpb08W4bJgucJb1ghVf-JgPZs0869qVxFrYRtXEF917wA at mail.gmail.com>
> Carsten Mattner wrote:
>> On Thu, Jul 5, 2012 at 4:39 PM, Wojciech Puchar
>> <wojtek at wojtek.tensor.gdynia.pl> wrote:
>> >>> As for reading anything else than internal firefox data it is not
>> >>> possible
>> >>> except very basic bug is there.
>> >> Yes otherwise all the flash sites would have gathered files from local
>> >> disks.
>> > million bugs.
>> > i've already seen trojans that completely took control over firefox.
>> > But - in spite it was windoze - ONLY firefox. Everything else was fine.
>> > Deleting firefox user data removed the trojan.
>> Nothing is impossible at that complexity.
>> I'd still like to know what Julian saw as you didn't see that.
>> Did it really contain a script which made it fetch random files from the
>> local disk?
> I don't know.
> I wrote how I obtained the data patern I saw, in my:
Fair enough :).
>> Message-id: <201207050936.q659aWCI016222 at fire.js.berklix.net>
>> Date: Thu, 05 Jul 2012 11:36:32 +0200
> Others very welcome to try it.
>> Which Firefox version?
> Mozilla/5.0 (X11; FreeBSD amd64; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
I don't want to be that guy whos says it but that version is old and
may contain widely known holes.
>> I am a little concerned.
> Me too !
> Not had tme to pursued it though.
> & I dont feel like exporting that data public
> in case its already gone too far.
You don't have to export it at all.
Can you confirm the data within is the same as say the same
file in /etc or ~/.ssh? If that's really the case, it's a problem.
> I suggest others create a dummy guest account & then accesss URL & do
> page save as I wrote.
More information about the freebsd-questions