Check this artical
http://www.securityfocus.com/archive/1/378632/2004-10-15/2004-10-21/0
and try to see html files in "mangleme-1.2\gallery" directory of tar
--------------------- summary ------------------------ "To: BugTraq Subject: Web browsers - a mini-farce Date: Oct 18 2004 2:18PM Author: Michal Zalewski <lcamtuf ghettot org> Message-ID: 20041018123525.V88652@dekadens.coredump.cx
Good morning,
I wanted to file a vague report a couple of potentially exploitable vulnerabilities and DoS conditions in popular browsers, announce a useful web browser testing tool, and stir some controversy - all in one short post. Let me know how I doing.""
On Mon, 25 Oct 2004, Sachin Rase wrote:
Check this artical
http://www.securityfocus.com/archive/1/378632/2004-10-15/2004-10-21/0
and try to see html files in "mangleme-1.2\gallery" directory of tar
Wow! this was surely an eye opener for me. Until now I had a (wrong) belief that links + Linux is the safest option to browse web-sites. I tried the html file in the directory and links went for a toss.
One thought: the exploits seem to target the memory handling techniques of the browsers. What if the browsers are written in Java? Well AFAIK Java lets programmers concentrate on the program at hand than the memory management part of it. Also Java browsers will be platform independent. Looking at Eclipse I feel that Java applications are on par with others in terms of speed.
On Tue, Oct 26, 2004 at 07:58:41AM +0530, Nikhil Joshi wrote:
One thought: the exploits seem to target the memory handling techniques of the browsers. What if the browsers are written in Java? Well AFAIK Java lets programmers concentrate on the program at hand than the memory management part of it. Also Java browsers will be platform independent.
The only thing Java does different is garbage collection. So you don't have free() or "delete" in Java. But, I think badly written Java code will crash or do unexpected things.
Looking at Eclipse I feel that Java applications are on par with others in terms of speed.
Honestly, Java blows! I've not come across native compiled Java so I can't comment on that, though I have high hopes on it.
Nosferatu