> -----Original Message----- > From: Jochem Maas [mailto:jochem@xxxxxxxxxxxxx] > Sent: Friday, September 05, 2008 6:53 AM > To: Robert Cummings > Cc: Bastien Koert; Dan Shirah; eugenem@xxxxxxxxxxxxx; List_PHP_General > Subject: Re: Google Chrome > > Robert Cummings schreef: > > On Fri, 2008-09-05 at 03:15 +0200, Jochem Maas wrote: > >> Bastien Koert schreef: > >>> On Thu, Sep 4, 2008 at 5:22 PM, Jochem Maas <jochem@xxxxxxxxxxxxx> > wrote: > >>> > >>>> Bastien Koert schreef: > >>>> > >>>>> On Thu, Sep 4, 2008 at 4:31 PM, Dan Shirah <mrsquash2@xxxxxxxxx> > wrote: > >>>>> > >>>>> Yippie, Chrome already exploited for DoS attacks? > >>>>>> http://blogs.zdnet.com/security/?p=1847&tag=nl.e539 > >>>>>> > >>>>>> > >>>>> Its not a DoS, its just a browser crash > >>>>> > >>>> so forcing a browser to crash is not 'Denial of Service'? > >>>> > >>>> I think your confused with DDoS > >>>> > >>>> > >>> DDoS is a Distributed Denial of Service attack where a server is > attacked > >>> via multiple computers (like a bot net) at the same time AFAIK > >> no shit. so if you drop the 'Distributed' you get 'Denial of > Service'. DoS > >> is rather general, code that keeps crashing your browser on purpose > is denying > >> you the service it provides (viewing webpages). > >> > >> rather like someone running off with your girlfriend ... you get > denied service. > > > > I thought Chrome was set up so if your current page caused a crash > other > > loaded pages didn't crash also. In which case DoS doesn't apply if > only > > the requested page crashes since you're still getting service. > > yes, and somebody already showed how to crash the whole damn app. > type 'evil:%', for example, into the addressbar IIRC Yep, that'll do it. As soon as you type the %, it crashes. Anything followed by ":%" seems to do it. Also FWIW, I've crashed it with 5 tabs open when I tried to close one of the tabs. Clicking the option to restart Chrome brought it back up with all 5 tabs. Again, when I tried to close one, it crashed and reinstated all 5 upon restart... ad nauseum. Maybe I'm picky... but if a newly-released beta program crashes in the first minute or two that I'm playing with, it proooooobably wasn't ready for beta in the first place. My 2c. Todd Boyd Web Programmer -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
