23 ms·
It doesn't have to be a fault in the JavaScript language for it to be disconcerting or fascinating. That NAT pinning attack is also disconcerting and fascinatin
by apike 16y ago
It doesn't have to be a fault in the JavaScript language for it to be disconcerting or fascinating. That NAT pinning attack is also disconcerting and fascinating. An XSS to your router attack is more elementary and so it's easier to grok for the average JavaScript developer and less interesting to a security expert.
- tptacek 16y agoThe fact that Hoffman's router attack wasn't XSS is an example of why I'm disappointed in this talk. I grant you that the talk was probably fascinating, especially to generalist Javascript programmers. I'm only disappointed in a "Hacker News" sense. Of course, it's not Hoffman's job to be fascinating to (or appropriately headlined on) Hacker News.