Mozilla says a new Firefox security bug is under active attack
1–10 of 72 posts
Re: Mozilla says a new Firefox security bug is under active attack
#2> But researchers found that the bug could allow malicious JavaScript to run outside of the browser on the host computer.
The phrasing may unfortunately mislead the less technical readers of their audience.
JavaScript always runs “on the host computer”, this should be described as a sandbox escape.
Re: Mozilla says a new Firefox security bug is under active attack
#3> But researchers found that the bug could allow malicious JavaScript to run outside of the browser on the host computer. The phrasing may unfortunately mislead the less technical readers of their audience. JavaScript always runs “on the host computer”, this should be described as a sandbox escape.
I’d say “allowing the code to run on the host computer” is way less confusing for the less technical people than “allowing the code to run outside the sandbox”. Most people have absolutely no idea what sandboxing means.
Re: Mozilla says a new Firefox security bug is under active attack
#4> But researchers found that the bug could allow malicious JavaScript to run outside of the browser on the host computer. The phrasing may unfortunately mislead the less technical readers of their audience. JavaScript always runs “on the host computer”, this should be described as a sandbox escape.
> JavaScript always runs “on the host computer”
But they carefully qualified it with "outside of the browser [meaning sandbox]" and you left that out of your quote.
Re: Mozilla says a new Firefox security bug is under active attack
#5Previous discussion: https://news.ycombinator.com/item?id=21995055
Re: Mozilla says a new Firefox security bug is under active attack
#6> But researchers found that the bug could allow malicious JavaScript to run outside of the browser on the host computer. The phrasing may unfortunately mislead the less technical readers of their audience. JavaScript always runs “on the host computer”, this should be described as a sandbox escape.
I’d say “allowing the code to run on the host computer” is way less confusing for the less technical people than “allowing the code to run outside the sandbox”. Most people have absolutely no idea what sandboxing means.
IHMO lying / being vague is never good when trying to educate someone. Non-technical people are not dumb and can understand what a sandbox is.
Re: Mozilla says a new Firefox security bug is under active attack
#7> But researchers found that the bug could allow malicious JavaScript to run outside of the browser on the host computer. The phrasing may unfortunately mislead the less technical readers of their audience. JavaScript always runs “on the host computer”, this should be described as a sandbox escape.
> JavaScript always runs “on the host computer” But they carefully qualified it with "outside of the browser [meaning sandbox]" and you left that out of your quote.
“Browser” does not mean “sandbox” though.
Re: Mozilla says a new Firefox security bug is under active attack
#8Earlier quoted context omitted.
> JavaScript always runs “on the host computer” But they carefully qualified it with "outside of the browser [meaning sandbox]" and you left that out of your quote.
“Browser” does not mean “sandbox” though.
I think they're using it short for 'browser's sandbox.' Try reading it charitably rather than bending over backwards to find fault and making wild accusations of 'lying.'
Re: Mozilla says a new Firefox security bug is under active attack
#9> But researchers found that the bug could allow malicious JavaScript to run outside of the browser on the host computer. The phrasing may unfortunately mislead the less technical readers of their audience. JavaScript always runs “on the host computer”, this should be described as a sandbox escape.
Not really, I think. "[O]utside of the browser on the host computer" implies that there are other possible ways in which JavaScript could execute, one of those inside of the browser on the host computer, which is pretty much the expected thing and tangentially covers the concept of sandboxing.
Re: Mozilla says a new Firefox security bug is under active attack
#10A chain is as strong as its weakest link. Firefox's privacy characteristics are as strong as its security track record.