HackerTrans
TopNewTrendsCommentsPastAskShowJobs

Firefox Browser Hacked in 8 Seconds Using 2 Critical Security Flaws(forbes.com)

15 points·by behnamoh·vor 4 Jahren·10 comments
forbes.com
Firefox Browser Hacked in 8 Seconds Using 2 Critical Security Flaws

https://www.forbes.com/sites/daveywinder/2022/05/22/firefox-browser-hacked-in-8-seconds-using-2-critical-security-flaws/

11 comments

londons_explore·vor 4 Jahren
The author doesn't know that Firefox on iOS cannot be affected due to the design of browsers of iOS (they are not allowed to use internal JavaScript or web rendering engines).

That brings into question the rest of the analysis in the article.
joe_guy·vor 4 Jahren
They also seem to believe the speed of an exploit is relevant enough to put it in the headline and repeat it several times in th article.
samhw·vor 4 Jahren
Also, eight seconds sounds like a terrifically long time for it to take effect. That's tens of billions of CPU cycles, billions of arithmetic instructions, millions of disk seeks, a hundred or so page loads, a dozen "knock knock" jokes in call-and-response between London and Sydney. How non-technical does one have to be to think "eight seconds" is fast in computer time?!
londons_explore·vor 4 Jahren
To me, 8 seconds implies 'it probably needs loads of heap grooming, and even then is probably only 90% reliable'
remram·vor 4 Jahren
Why is the duration important? Or are they saying the hack was developed in 8 seconds?
plonk·vor 4 Jahren
It's to warn you that the author has no clue about security and you should look for a better source.
jqpabc123·vor 4 Jahren
Remember the good old days when this sort of thing was unlikely due to the "eyeballs on code" theory?
sieabahlpark·vor 4 Jahren
Mozilla is just a shittier Google now. They purposely make a terrible browser so that the media just drives everyone to Chrome.
fractalf·vor 4 Jahren
Come on.. nothing gets shittier than google
silverPoodle·vor 4 Jahren
The author of this article clearly has no clue what he is talking about, but are there any write-ups, streams or similar from pwn2own participants finding these vulnerabilities?
mrtweetyhack·vor 4 Jahren