Full Disclosure mailing list archives
Re: Apple Safari ... DoS Vulnerability
From: Stuart Dunkeld <burningcows () gmail com>
Date: Wed, 4 Mar 2009 00:02:30 +0000
Browsers could reasonably implement various kinds of resource expenditure limitations, but few, if any, do OOTB (FF 2.x I think added some basic "this script is taking too long" controls, but there is a lot more that could be done).
IE, Firefox, Safari and Chrome all have basic protection against long-running scripts - http://www.nczonline.net/blog/2009/01/05/what-determines-that-a-script-is-long-running/ has some information on each implementation. What else would you have browser vendors do? I expect they think their current strategy of responding to specific bugs along with a bit of fuzzing and insane-input-testing is cost-effective and 'good enough' for their users. Regards --stuart _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Re: Apple Safari ... DoS Vulnerability, (continued)
- Re: Apple Safari ... DoS Vulnerability Chris Evans (Mar 02)
- Re: Apple Safari ... DoS Vulnerability Nick FitzGerald (Mar 02)
- Re: Apple Safari ... DoS Vulnerability Chris Evans (Mar 02)
- Re: Apple Safari ... DoS Vulnerability Nick FitzGerald (Mar 03)
- Re: Apple Safari ... DoS Vulnerability Michal Zalewski (Mar 03)
- Re: Apple Safari ... DoS Vulnerability Valdis . Kletnieks (Mar 03)
- Re: Apple Safari ... DoS Vulnerability Nick FitzGerald (Mar 02)
- Re: Apple Safari ... DoS Vulnerability Michal Zalewski (Mar 03)
- Re: Apple Safari ... DoS Vulnerability Nick FitzGerald (Mar 03)
- Re: Apple Safari ... DoS Vulnerability Chris Evans (Mar 03)
- Re: Apple Safari ... DoS Vulnerability Nick FitzGerald (Mar 03)
- Re: Apple Safari ... DoS Vulnerability Stuart Dunkeld (Mar 03)
- Re: Apple Safari ... DoS Vulnerability Chris Evans (Mar 03)
- Re: Apple Safari ... DoS Vulnerability Chris Evans (Mar 02)
- Re: Apple Safari ... DoS Vulnerability Chris Evans (Mar 02)
- Re: Apple Safari ... DoS Vulnerability Pavel Kankovsky (Mar 04)
- Re: Apple Safari ... DoS Vulnerability Nick FitzGerald (Mar 02)
- Re: Apple Safari ... DoS Vulnerability Valdis' Mustache (Mar 02)
- Re: Apple Safari ... DoS Vulnerability Jason Starks (Mar 02)
- Re: Apple Safari ... DoS Vulnerability Valdis' Mustache (Mar 02)