Hacker News Reader

metzmanon New Search Strategy for Firefox

I think they made a deal that Yahoo search results would be provided by bing

metzmanon Chrome now uses clang for production builds on Linux

Chromium doesn't ship binaries to end users. Linux distros that have chromium build it from source. But I suspect that they are probably going to switch to clang as the recommend compiler for development.

metzmanon Reflected File Download: A New Web Attack Vector

Ahh...that makes sense

metzmanon Reflected File Download: A New Web Attack Vector

An attacker can use a privilege escalation attack to execute as superuser, so even though there should be no way to "gain control of the entire computer" without the admin password, in practice this isn't the case.

metzmanon Reflected File Download: A New Web Attack Vector

I think the author is claiming that clicking on https://www.google.com/s;/ChromeSetup.bat;/ChromeSetup.bat?g... results in a file ChromeSetup.bat being downloaded, but in chrome and firefox the file downloaded is f.txt.

Has anyone tried this on other browsers?

EDIT:

Here is the portion of the paper explaining why this no longer works:

"However, a common implementation error could result in Reflected File Download from the worst kind. Content-Disposition headers SHOULD include a "filename" parameter, to avoid having the browser parse the filename from the URL.

This is the exact problem that multiple Google APIs suffered from until I reported it to the Google security team, leading to a massive fix in core Google components."