TEST YOUR FATE

Name
Email
Subject
Comment *
File	Select/drop/paste files here
* = required field	[▶ Show post options & limits] Confused? See the FAQ.

Name

Subject

Comment *

File

Select/drop/paste files here

* = required field

[▶ Show post options & limits]
Confused? See the FAQ.

Flag
Oekaki	Show oekaki applet (replaces files and can be used instead)
Options	Do not bump (you can also write sage in the email field) Spoiler images (this replaces the thumbnails of your images with question marks)
Password	(For file and post deletion.)
Allowed file types:jpg, jpeg, gif, png, webm, mp4, pdf Max filesize is 16 MB. Max image dimensions are 15000 x 15000. You may upload 3 per post.

Flag

Oekaki

Show oekaki applet
(replaces files and can be used instead)

Options

Do not bump
(you can also write sage in the email field)

Spoiler images
(this replaces the thumbnails of your images with question marks)

Password

(For file and post deletion.)

Allowed file types:jpg, jpeg, gif, png, webm, mp4, pdf
Max filesize is 16 MB.
Max image dimensions are 15000 x 15000.
You may upload 3 per post.

[–]

▶TEST YOUR FATE Anonymous 01/17/18 (Wed) 07:07:57 No.853730>>853731 >>853733 >>853748 >>853785 [Watch Thread][Show All Posts]

Visiting this link https://iabem97.github.io/chaiOS/ causes Firefox 57.0.4 to freeze (in other words, it's a DoS vulnerability; apparently Rust is not saving it)

Perhaps other browsers may have a trouble too.

Originally it was presented as a proof of concept which crashes some macOS/iOS applications, including safari.

From what I can see, the page content abuses some Unicode characters known as ZALGO text.

I can't report it officially since I was banned on mozilla bugzilla, so can someone repost it to mozilla's bugzilla so they fix their remains of a browser?

and what other mitigations are possible right now?

▶Anonymous 01/17/18 (Wed) 07:09:01 No.853731

>>853730 (OP)

and yeah, it works without javascript and even without CSS, that's why it's nastier than your average browser exploit

▶Anonymous 01/17/18 (Wed) 07:12:34 No.853733

>>853730 (OP)

also, the html content is weighing 12253982 bytes, and when compressed with xz with default options it's 9444 bytes.

so even just the size of it may be a problem.

▶Anonymous 01/17/18 (Wed) 07:16:41 No.853735

for convenience, the compressed downloaded content is here https://my.mixtape.moe/khrssy.xz

(and if it's simply viewed as a text, all text editors I tried have no problem displaying it)

▶Anonymous 01/17/18 (Wed) 07:37:47 No.853739

Oh noes, the botnet evolved again. Fucking plebs stop using unicode REEEEEEEEEEEEEEEEEEEEEEEEEEEEE

▶Anonymous 01/17/18 (Wed) 07:37:58 No.853740>>853743

my browser just auto closes the tab right when it starts to fuck up then everything is fine

▶Anonymous 01/17/18 (Wed) 08:04:19 No.853743

>>853740

which browser is it?

▶Anonymous 01/17/18 (Wed) 08:08:48 No.853744

Works fine for me in Lynx. Modern web browsers are just shit.

←←←→→→ (p1 of 2295)

→!-- hello, this was written by Abraham Masri @cheesecakeufo -->

<head>

+93xwz=‍ ‍'9eEJE'd5

▶Anonymous 01/17/18 (Wed) 08:59:30 No.853748

>>853730 (OP)

Pale Moon works fine.

▶Anonymous 01/17/18 (Wed) 09:07:00 No.853752

I opened the page with Links and it has ~11MB. No way I'm going to let my browser load that.

▶Anonymous 01/17/18 (Wed) 11:12:53 No.853785>>853810

>>853730 (OP)

It displayed "Page is loading..." and made Firefox (58.0b15) very sluggish. I had no problem closing the tab though.

>apparently Rust is not saving it

You know that Firefox has not been completely rewritten in Rust, right?

▶Anonymous 01/17/18 (Wed) 11:32:39 No.853789

Didn't freeze, but slowed down to a crawl and ate cpu like a bitch on ff 52.

▶Anonymous 01/17/18 (Wed) 12:17:08 No.853795

Says "Page is loading" and doesn't download anything on qutebrowser

▶Anonymous 01/17/18 (Wed) 13:46:27 No.853810

>>853785

>You know that Firefox has not been completely rewritten in Rust, right?

Of course, that's a joke.

>very sluggish

perhaps I was too impatient to wait. UI was completely unresponsive for about 10 seconds.

/tech/ - Technology★

General

WebM

Theme

User JS

Do not paste code here unless you absolutely trust the source or have read it yourself!

Favorites

Customize Formatting

Filters