3 ms·
It's me. I discovered the exploit in the wild when I became a victim of it. Skill-set limited. I was able to identify it and understand what it basically does,
by fukusa 11y ago
It's me. I discovered the exploit in the wild when I became a victim of it. Skill-set limited. I was able to identify it and understand what it basically does, but not much more.
- zobzu 11y agoHow long did it take between your discovery and mozilla fix?
- lloydde 11y agoModest too, "The script triggered a file dialog showing it was trying to access a local file. I opened the Developer Tools and saw all kinds of other files being accessed, including my private and public keys. I nearly got a heart attack. I quickly revoked all SSH keys and started monitoring the requests to narrow it down before I submitted the bug ticket with all the information I had, including the exploit script that was executed." Wow, lucky that it triggered a prompt. Thanks for the response!
- fukusa 11y agoYou're welcome. Yeah, that's exactly how I feel.