Warnings on the download page

Mike Perry mikepery at fscked.org
Fri Mar 9 01:05:49 UTC 2007


Thus spake H D Moore (torspam at metasploit.com):

> Thanks for the feedback! Keep in mind this is the first applet I have ever 
> written :-) Any information about the new API would be appreciated. Do 
> you happen to know what versions it is compatible with? Bizzare that they 
> would explicitly allow non-proxied connections. I used the Datagram 
> Socket was so that I could send requests directly to the DNS server and 
> not have to do any extra processing on the server side. 

Actually, I'm also curious about your on-the-fly applet tag
generation. Were you aware that it would bypass that
security.enable_java setting or was it just a general evasive thing
you did for filtering? Do you have any information if this is specific
to certain versions/JVMs or if it is a universal hack?

Have you contacted the Firefox people?

-- 
Mike Perry
Mad Computer Scientist
fscked.org evil labs



More information about the tor-talk mailing list