bugtraq - Re: [Full-disclosure] Firefox bookmark cross-domain surfing vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Thu, 22 Feb 2007 17:23:13 -0800
From: Daniel Veditz <dveditz@...zio.com>
To: "pdp (architect)" <pdp.gnucitizen@...glemail.com>
Cc: Michal Zalewski <lcamtuf@...ne.ids.pl>, security@...illa.org,
	bugtraq@...urityfocus.com, full-disclosure@...ts.grok.org.uk
Subject: Re: [Full-disclosure] Firefox bookmark cross-domain surfing	vulnerability

pdp (architect) wrote:
> However, here is an interesting thought for you: instead of asking the
> user into bookmarking a page you can supply the bookmark directly to
> their browser by using Live Bookmarks. So, a mainstream attack will be
> when a SPLOG network injects malicious links into their feeds. If
> someone happens to be subscribed to this network with a Live Bookmark
> and they click on it... well you know.
> 
> I haven't tested this, although it should work.

It doesn't work -- thankfully we thought of that back when we implemented
Live Bookmarks in Firefox 1.0