Live data from Hacker News

AwSnap – This link crashes Chrome

github.com

41–43 of 43 posts

Re: AwSnap – This link crashes Chrome

#43
post #6

Earlier quoted context omitted.

That might make sense, since I'm seeing the same behaviour but have SSL enabled for Reddit.

Could be. My concern is: 1) Most people don't have SSL enabled for most (if any) sites that are optional. 2) Most normal users are using the standard build for MacOS/Win, not the dev channel, and not Linux. 3) This requires no XSS or anything remotely tricky. Just a couple hundred bytes of HTML, and that's it. 4) Most web forum filters and formatting code (including Markdown) let this thru just fine. Maybe I'm blowin…

Oh, for sure. There are plenty of attack vectors for this sort of thing, I just find the SSL behaviour interesting.
Post reply on HN