Thanks to the efforts from a few dedicated members of Trail of Bits (@withzombies, scott, and others), I have real info to share.
There's a bunch of misinformation about the new Firefox exploit so I'd like to clear a few things up. https://twitter.com/movrcx/status/803744059022069760 …
This Tweet is unavailable.
-
-
-
First off, it's a garden variety use-after-free, not a heap overflow, and it affects the SVG parser Firefox.
- 15 more replies
New conversation -
-
-
They've had no issue keeping up with performance and features. It has everything to do with priorities.
-
from occasional lurking in their dev channels & forums it's on wishlist for years but lacked resources
- 4 more replies
New conversation -
-
-
till effort to make Firefox multi process / memory partitioning bears fruits ( year more?), such simple exploits "easy"
-
Multi-process is only the beginning of the path towards a meaningful sandbox and then a good implementation.
- 2 more replies
New conversation -
-
-
yep. This whole convo just made me hit the donate button. We need an ever improving Firefox in ecosystem
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Good explanations !
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.