3 ms·

Regarding the question of whether browsers sanitize the fonts, I'm looking at the chromium issue linked to what the article calls a "weaponized exploit", and ev

by pierrec 10y ago

Regarding the question of whether browsers sanitize the fonts, I'm looking at the chromium issue linked to what the article calls a "weaponized exploit", and even though it's marked as fixed (obviously), it's not clear whether they marked it as such because windows released a security update or because chrome did with sanitation. While the idea of monkey-patching kernel bugs through sanitation is kind of ugly, it would be also be ugly to rely on windows updates, considering that many people are furiously/incorrectly disabling them because of the ridiculous windows 10 update behavior... https://bugs.chromium.org/p/project-zero/issues/detail?id=369 https://bugs.chromium.org/p/project-zero/issues/detail?id=36...

yuhong 10y ago
I think the issue of XP/Server 2003 systems that will never receive a patch are more important. What is fun is the MS15-077/MS15-078 fiasco where one ATMFD patch was released for Server 2003 and another about a week later was not. OTS has been used for a long time now by browsers BTW.
ryuuchin 10y ago
It's marked fixed because Microsoft released a patch for it. However at the very least Chrome and Firefox have been doing font sanitization for quite some time now (several years+ I believe). I'm not sure for other browsers. Opera might since it's just a Chromium fork and OTS[1] is a part of the WTF (webkit tools framework). [1] https://github.com/khaledhosny/ots https://github.com/khaledhosny/ots
- zeta0134 10y ago
  Wait, since when is Opera a Chromium fork? They've been around a lot longer than the Chrome project. Unless they had a radical change of heart recently that I haven't heard about yet?
  - acqq 10y ago
    Published on 12 February 2013: "300 Million Users and Move to WebKit" https://dev.opera.com/blog/300-million-users-and-move-to-webkit/ https://dev.opera.com/blog/300-million-users-and-move-to-web... "Opera sends 90 out the door" "They were sacrificed for strategic choice to dump core technology, with Opera's proprietary engine Presto and JavaScript interpreter Carakan" https://news.ycombinator.com/item?id=5237967 https://news.ycombinator.com/item?id=5237967

by pierrec 10y ago

yuhong 10y ago

I think the issue of XP/Server 2003 systems that will never receive a patch are more important. What is fun is the MS15-077/MS15-078 fiasco where one ATMFD patch was released for Server 2003 and another about a week later was not. OTS has been used for a long time now by browsers BTW.

ryuuchin 10y ago

It's marked fixed because Microsoft released a patch for it. However at the very least Chrome and Firefox have been doing font sanitization for quite some time now (several years+ I believe). I'm not sure for other browsers. Opera might since it's just a Chromium fork and OTS[1] is a part of the WTF (webkit tools framework). [1] https://github.com/khaledhosny/ots https://github.com/khaledhosny/ots

zeta0134 10y ago
Wait, since when is Opera a Chromium fork? They've been around a lot longer than the Chrome project. Unless they had a radical change of heart recently that I haven't heard about yet?
- acqq 10y ago
  Published on 12 February 2013: "300 Million Users and Move to WebKit" https://dev.opera.com/blog/300-million-users-and-move-to-webkit/ https://dev.opera.com/blog/300-million-users-and-move-to-web... "Opera sends 90 out the door" "They were sacrificed for strategic choice to dump core technology, with Opera's proprietary engine Presto and JavaScript interpreter Carakan" https://news.ycombinator.com/item?id=5237967 https://news.ycombinator.com/item?id=5237967