Re:A Conspiracy to Kill IE6
by jrochkind1 on Wednesday May 01, 2019 @04:32PM
(#19801328)
I suppose more awful thing could be an accidental XSS or other vulnerability.
Which would then compromise what? People's youtube accounts?
IE6 had plenty of nasty vulns by the time this banner had gone up (06/14/2009): https://www.cvedetails.com/vulnerability-list/vendor_id-26/p...
That said, the people with this access probably knew WTF they were doing.
Exactly. They were getting rid of IE6
As opposed to the denial of service style bugs like an empty src element in an img tag?
They're perfectly capable of introducing other DOS bugs that don't depend on bad markup.
Re:A Conspiracy to Kill IE6
by dgoldstein0 on Thursday May 02, 2019 @02:43AM
(#19805362)
This is a poor argument - just because we can shoot our own feet, doesn't mean we should not try to prevent it from happening by accident.
And it sounds like it wasn't just DOS - also just plain "it doesn't work in ie6" seems the most likely outcome; crashes and DOS that the article describes just sounds like the most egregious cases.
The most awful thing that could happen to 2006-era YouTube: they could stop delivering ad impressions for an hour or two. Oh wait, no; 2006-era YouTube didn't even have ads yet.