Comments on: A Look at MFSA 2008-35

By: Dan Veditz

Dan Veditz — Wed, 23 Jul 2008 01:01:57 +0000

I’m told Firefox registers “firefoxURL” because of some Vista default-app-setting requirement. They don’t work, however–they were disabled in Firefox 2.0.0.5 after you abused them last year.

By: Zero Day mobile edition

Zero Day mobile edition — Tue, 22 Jul 2008 16:22:19 +0000

[...] to form, Billy Rios promised a more in depth look at the MSFA2008-35 vulnerability which is another protocol handler flaw in Firefox 3. As previously reported here, this was [...]

By: xssniper

xssniper — Tue, 22 Jul 2008 16:10:12 +0000

Yeah, Gopher needs to go… the attack surface/usability ratio has moved to favor attack surface (IMHO). I’m glad FF3 doesn’t register Gopher anymore and IE implements a neutered version of Gopher.

By: Awesome AnDrEw

Awesome AnDrEw — Tue, 22 Jul 2008 14:03:54 +0000

Nice work, BK. It was a pretty thorough explanation. Does anyone even use Gopher any more? Last I had heard there were only a handful of sites left.