News for hackers. Stuff that matters.

A comment on Mozilla CTO: "Maybe we should just adopt, support, and bundle Tor in Firefox...".

Re:Mozilla CTO: "Maybe we should just adopt, support, and bu... by octatone2 on Monday August 05, 2013 @07:44AM (#6159542)
They may want to fix that JS heap spray exploit first in their ESR ...
[ Parent | on HN ]
Re:Mozilla CTO: "Maybe we should just adopt, support, and bu... by blueveek on Monday August 05, 2013 @07:46AM (#6159547)
Tracking bug: https://bugzilla.mozilla.org/show_bug.cgi?id=901365

edit: seems to be already fixed in ESR 17.0.7

[ Parent | on HN ]
Re:Mozilla CTO: "Maybe we should just adopt, support, and bu... by riquito on Monday August 05, 2013 @08:24AM (#6159680)
ESR 17.0.7 dated 25 June 2013. How exploiting an old bug on an old version became a "0 day" is beyond me
[ Parent | on HN ]
Re:Mozilla CTO: "Maybe we should just adopt, support, and bu... by makomk on Monday August 05, 2013 @08:46AM (#6159746)
It took about a day before anyone figured out what exactly the exploit was doing; I guess all the normal researchers are off at Black Hat without their usual tools.
[ Parent | on HN ]