Re: Google Chrome

Robert Cummings schreef:

On Fri, 2008-09-05 at 03:15 +0200, Jochem Maas wrote:

Bastien Koert schreef:

On Thu, Sep 4, 2008 at 5:22 PM, Jochem Maas <jochem@iamjochem.com> wrote:

Bastien Koert schreef:

On Thu, Sep 4, 2008 at 4:31 PM, Dan Shirah <mrsquash2@gmail.com> wrote: Yippie, Chrome already exploited for DoS attacks?

http://blogs.zdnet.com/security/?p=1847&tag=nl.e539

Its not a DoS, its just a browser crash

so forcing a browser to crash is not 'Denial of Service'? I think your confused with DDoS

DDoS is a Distributed Denial of Service attack where a server is attacked via multiple computers (like a bot net) at the same time AFAIK

no shit. so if you drop the 'Distributed' you get 'Denial of Service'. DoS is rather general, code that keeps crashing your browser on purpose is denying you the service it provides (viewing webpages). rather like someone running off with your girlfriend ... you get denied service.

I thought Chrome was set up so if your current page caused a crash other loaded pages didn't crash also. In which case DoS doesn't apply if only the requested page crashes since you're still getting service.

yes, and somebody already showed how to crash the whole damn app. type 'evil:%', for example, into the addressbar IIRC :-D

Cheers, Rob.