Live data from Hacker News

This URL crashes Chrome/Chromium

demo.cmrg.net

21–30 of 35 posts

Re: This URL crashes Chrome/Chromium

#25

Flagged. That's pretty annoying reirob; I assumed that would be a link to an article about the URL, since just crashing my browser was obviously a bad thing to do. Question to downvoters: You don't ever click down the list of Hacker News submissions without thinking too hard first, or you don't think crashing my browser (and losing any state I had in them) is annoying?

Well, I have got it from Fefe's blog [1] directly as the link. I tried it out before submitting, i.e. I opened a Chromium browser and put the link. The title says what it does - I do not think it is link bait. And Fefe's blog gives as explanation (rough translation from German): The TLS handshake of this site kills Chrome browser.

I too want to know what goes on and I actually think that HN IS the place to submit this kind of bugs.

Re: This URL crashes Chrome/Chromium

#27

Anyone explain what it does to chrome? I'm using chrome on android, and it doesn't crash and the lock icon info doesn't show anything that jumps out as wrong.. ?

Document explaining the root of the weakness in the TLS protocol: https://secure-resumption.com/

Blog from Chrome- and TLS developer Adam Langley: https://www.imperialviolet.org/2014/03/03/triplehandshake.ht...

Re: This URL crashes Chrome/Chromium

#30

I thought the process-per-tab thing was meant to stop this sort of thing from taking the whole browser down.

That helps when the website code itself is malicious/broken. This crash is due a bug in the underlying TLS code itself. I don't think TLS is sandboxed or separated-per-tab, nor should it expectedly be.
Post reply on HN