Enterprise open source Toolkit
Story: Linux users warned about Firefox flaw
Posted by: J. DeLaughter (Thursday 22 September 2005, 7:23 PM)
Ok.. EXTREMELY CRITICAL? Come on - even if code were run in your shell, it would still only be run as a user, and the damage would be contained to a single user's files. So you lose a few mp3s or a .*rc file or two. Big deal. Now compare this to Windows, where everyone is given adminstrator status. This is part of what is so great about *nix - by default any damage to a system is controlled and contained to the user that called the script.
Unless the person is going against everything that is right and good and is running his/her box as *root.* In which case, he/she probably deserves everything that comes to him/her. :)
Don't get me wrong - I'm not cavalier or anything, and I'll be upgrading, but does this deserve an EXTREMELY CRITICAL warning level? Hell, any website that puts cookies on your box can track and perform basic functions on your computer.
Full Talkback thread
