I have a Chrome bug that's 194 days old, permits any local HTML file to read files like your private ssh key on one OS, status "Assigned" :/
-
-
Replying to @_jsoo_
@Gunther_AR Not sure. The P0 stuff is usually really high-severity. They triaged this one as a "low" b/c you need a local HTML file.1 reply 0 retweets 0 likes -
Replying to @tehjh
@tehjh@Gunther_AR attackers have been known to attach html files to emails ya know...1 reply 0 retweets 0 likes
Replying to @jduck
@jduck @Gunther_AR And HTML downloads aren't treated as dangerous by Chrome, so one well-timed click is all it takes in the browser.
3:57 PM - 16 May 2015
0 replies
0 retweets
1 like
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.