full-disclosure - Re: Firefox focus stealing vulnerability (possibly other browsers)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <45CF9522.7010406@bucksch.org>
Date: Sun, 11 Feb 2007 23:13:54 +0100
From: Ben Bucksch <news@...ksch.org>
To: Michal Zalewski <lcamtuf@...ne.ids.pl>
Cc: full-disclosure@...ts.grok.org.uk, bugtraq@...urityfocus.com
Subject: Re: Firefox focus stealing vulnerability
 (possibly other browsers)

Thanks for the report, Michal.

Filed as bug 370092 <https://bugzilla.mozilla.org/show_bug.cgi?id=370092>

BTW: Your last bug (popup blocker + XMLHttpRequest + srand() = oops) was 
filed as bug 369390 <https://bugzilla.mozilla.org/show_bug.cgi?id=369390>
The factors of the bug are filed as separate bugs, see "Depends on" list.

Next time, could you please file the bugzilla bug yourself directly and 
cite the bug number in the post and cc security@...illa.org on it? I 
wouldn't want us to miss a critical bug just because I don't read FD. 
Thanks,

Ben

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/