Mozilla flaws more joke than jeopardy

Two presenters razzed developers of the open-source Mozilla browser this weekend at the ToorCon hacking convention in San Diego with claims that the browser's Javascript implementation is flawed, but the lecture appears to have been more stand-up comedy routine than substantiative research

The two researchers--college student and Six Apart developer Mischa Spiegelmock and hacker Andrew "Wbeelsoi" who also uses the handle "Weev"--appeared to demonstrate a remotely exploitable flaw in the Javascript implementation of the Mozilla Firefox browser during their Saturday presentation. However, the duo have not been able to actually get the vulnerability to result in control of a computer, Spiegelmock said in a statement posted to the Mozilla developer blog.

The presentation was intended mainly as a joke, Spiegelmock said in the statement, in which he apologized.

Read More