4 ms·
>Firefox zero-day that was being used to read people's private SSH keys Backup there. I somehow have not heard about this. What was the vector? What was the ex
by javajosh 5y ago
>Firefox zero-day that was being used to read people's private SSH keys
Backup there. I somehow have not heard about this. What was the vector? What was the exposure? E.g. have I leaked the contents of ~/.ssh to some (hopefully small, at least) subset of sites I've visited? Where can I learn more?
- tedunangst 5y agohttps://www.rapid7.com/db/modules/auxiliary/gather/firefox_pdfjs_file_theft/ https://www.rapid7.com/db/modules/auxiliary/gather/firefox_p...
- rrampage 5y agoIt was in 2015. Mozilla's post: https://blog.mozilla.org/security/2015/08/06/firefox-exploit-found-in-the-wild/ https://blog.mozilla.org/security/2015/08/06/firefox-exploit... and HN discussion at the time: https://news.ycombinator.com/item?id=10021376 https://news.ycombinator.com/item?id=10021376