Posts by John 173

Whitehats break out of Google Chrome sandbox

Not a problem

If there is some text on your browser window which says "Your browser is being pwned!" then just turn off the machine!

Sarah Palin calls for US to stand by North Korea

May be a slip...

... but Palin has said before she doesn't really know the difference between North and South Korea. The really sad thing is, this won't hurt her at all in an American election, may even help her a bit.

Windows 0day allows malicious code execution

Required

How do you know there aren't already exploits in the wild? Also, the Gdi in NtGdiEnableEUDC puts the UI in KERNEL.

Oops

Oops, I take that back about the GDI comment.

Ubuntu's iTunes jumps to Windows and Android

Spotify

Currently I use Spotify and don't see too much of a need for change. The advantange of using spotify is the many social elements surrounding it, such as community generated play-lists and user taste/artist similarity. I do miss owning my own CD's though, and Spotify doesn't stream beyond 160kbps for mobile devices, allowing 360kbps only for your wall computer. This could be pretty good for competition though, especially if it supports lossless formats such as flac.

Google Chrome update fills in parsing bug

How damage

I'm curious, how much damage could someone actually from the sandbox? Disk access? Unrestricted Memory access to the chrome processes space? Anyone have a link?

XML flaws threaten 'enormous' array of apps

Not too good validation

As far as I know, this isn't a valid xml document, but it gets parsed ok.

<?xml version='1.0'?><protocol v='1.0' id='1'><greetingrequest />as></protocol>

I think the '>' should be escaped.