[Dailydave] Firefox bugs
Dave Aitel
dave at immunityinc.com
Tue Oct 3 16:41:40 Local tim 2006
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
For those of you under a rock, there's a new firefox bug:
http://developer.mozilla.org/devnews/
I read somewhere that the PoC was posted to the web, but I can't find
it anywhere.
For those of you who watched the HP testemony on cspan.org, you may
have noticed that ReadNotify was used in a prior DD posting. DD goes
out to maybe 2500 people last time I checked...and I got under a
hundred readnotify responses. This corresponds with my last use of web
bugs against someone trying to blackmail one of my clients. It just
didn't work. This was the one big tool in the FBI/NYPD's toolbox, and
it's been broken during the fight against spammers. We had to do a
statistical analysis of all the web page accesses to get close.
Anyways, our congresscritters think that SPYWARE==WEB BUG. And it's
not true. Someone needs to call them and explain it slowly.
- -dave
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.1 (Cygwin)
iD8DBQFFIpLEtehAhL0gheoRAiDNAJsGEs7d3I4yNNuBWzmehQ2Eb3kLDwCeNIqO
QEM6Hw9878MM59bzFVpJUQs=
=iwXJ
-----END PGP SIGNATURE-----
More information about the Dailydave
mailing list