full-disclosure - this is fun?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: haplo at haplo.net (Jordan Klein)
Subject: this is fun?

I wouldn't call that fun.  It took my system to 100% cpu usage, spawned a 
ton of windows, and eventually caused firefox to crash.  I guess that crash 
was firefox's built-in protection mechanism against this type of DoS.  :-)

I haven't tried this with popup blocking enabled, since this is my work 
machine, and I have to allow popups so our internal sites work.  (Damn, lazy 
web developers...)

-- 
Jordan Klein                 ~  Beware of dragons
haplo@...lo.net              ~  for you are crunchy
UNIX System Administrator    ~  and go well with ketchup
----- Original Message ----- 
From: "Christian" <evilninja@....net>
To: <full-disclosure@...ts.netsys.com>
Cc: "Brandy Simon" <brandysimon@...il.com>
Sent: Sunday, February 20, 2005 7:51 AM
Subject: Re: [Full-Disclosure] this is fun?


> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Brandy Simon wrote:
>> http://picserv.on.zoy.org/IM39571.jpg
>
> hm, what exactly is it?
>
> $ wget http://picserv.on.zoy.org/IM39571.jpg
> - --14:45:06--  http://picserv.on.zoy.org/IM39571.jpg
>           => `IM39571.jpg'
> Resolving picserv.on.zoy.org... 80.65.228.129
> Connecting to picserv.on.zoy.org[80.65.228.129]:80... connected.
> HTTP request sent, awaiting response... 404 Not Found
> 14:45:06 ERROR 404: Not Found.
>
> but my mozilla/firefox browsers will display some hamsters, someone is
> saying something and cpu-usage is at 100%...
>
>
> - --
> BOFH excuse #200:
>
> The monitor needs another box of pixels.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.0 (GNU/Linux)
> Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
>
> iD8DBQFCGJX0C/PVm5+NVoYRAjrCAKCM3r964iLolLA9ztm/LRgEZgQZVACgwdDX
> c5YfMw+C9szHm2SMdg1XT30=
> =VS1R
> -----END PGP SIGNATURE-----
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>