Warnings on the download page
Mike Perry
mikepery at fscked.org
Fri Mar 9 01:05:49 UTC 2007
Thus spake H D Moore (torspam at metasploit.com):
> Thanks for the feedback! Keep in mind this is the first applet I have ever
> written :-) Any information about the new API would be appreciated. Do
> you happen to know what versions it is compatible with? Bizzare that they
> would explicitly allow non-proxied connections. I used the Datagram
> Socket was so that I could send requests directly to the DNS server and
> not have to do any extra processing on the server side.
Actually, I'm also curious about your on-the-fly applet tag
generation. Were you aware that it would bypass that
security.enable_java setting or was it just a general evasive thing
you did for filtering? Do you have any information if this is specific
to certain versions/JVMs or if it is a universal hack?
Have you contacted the Firefox people?
--
Mike Perry
Mad Computer Scientist
fscked.org evil labs
More information about the tor-talk
mailing list