4 ms·

I (former Firefox developer) do not see how using ping for this sort of attack has any advantage over any of the other myriad ways Javascript running in a brows

by roca 8y ago

I (former Firefox developer) do not see how using ping for this sort of attack has any advantage over any of the other myriad ways Javascript running in a browser can generate traffic to a site. If it does have an advantage, it's probably just something incidental like particular HTTP proxies being configured to let pings through, or something like that.

rolph 8y ago
no it involves multiple links being pointed at one webserver. read the article and you will see. you dont need JS or any skill other than knowing how to use an HTML5 tag and malform a ping for every link. you just need a good piece of clickbait is all.
A1kmm 8y ago
Probably more that certain sites are using serverside XSS filters that allow third party content a elements with ping attributes, but not to inject arbitrary JavaScript.