From owner-freebsd-questions@FreeBSD.ORG  Thu Jul  5 22:28:33 2012
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id BF64D1065675
	for <freebsd-questions@freebsd.org>;
	Thu,  5 Jul 2012 22:28:33 +0000 (UTC)
	(envelope-from carstenmattner@gmail.com)
Received: from mail-gh0-f182.google.com (mail-gh0-f182.google.com
	[209.85.160.182])
	by mx1.freebsd.org (Postfix) with ESMTP id 71CE88FC12
	for <freebsd-questions@freebsd.org>;
	Thu,  5 Jul 2012 22:28:33 +0000 (UTC)
Received: by ghbz22 with SMTP id z22so9352510ghb.13
	for <freebsd-questions@freebsd.org>;
	Thu, 05 Jul 2012 15:28:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
	h=mime-version:in-reply-to:references:date:message-id:subject:from:to
	:cc:content-type;
	bh=VQEy2kWmfbHNs3fvOMyrP9GH7YSlafVWMFvg3hUP944=;
	b=sFWRk8z7KP5Pa9Ls86Loo9dhEMPWk8AjE1L3ja/ZfQS9FTqao2IP73n/bgRQlB8rhM
	fQAwpgBGdUz/n8QTEKwKhAti5xIjlaI9+fLmy7XCR+82RK77PFMQALElUjUwQT7XdsMi
	X63hsQhtt7RhPxd9bkYqFFBnL/d4KiYefYxe1dlf1puL2CKVoBkhTub2dzLsAe6+ddrW
	pBzrzcXzKzMTFEktXFKRdNzeTDM7nnEnkVPUbJ7dQIFetPfPsv7gSUNXAMN6LiXFXEWb
	x4k4FEW70XoY7NbfEKqqe+luoqG7jpMR/CapWFS6w7myiWtZS2Hrdbcp6WS2xpLce+wP
	bHQw==
MIME-Version: 1.0
Received: by 10.50.46.132 with SMTP id v4mr1032435igm.25.1341527312674; Thu,
	05 Jul 2012 15:28:32 -0700 (PDT)
Received: by 10.64.9.78 with HTTP; Thu, 5 Jul 2012 15:28:32 -0700 (PDT)
In-Reply-To: <alpine.BSF.2.00.1207051637580.2537@wojtek.tensor.gdynia.pl>
References: <1341406026965-5724143.post@n5.nabble.com>
	<alpine.BSF.2.00.1207042028240.22277@wojtek.tensor.gdynia.pl>
	<CACY+HvrA+ua2R0XYZexu4Hxzkn8pLSWTszm9WhhZhxVFvKJH+A@mail.gmail.com>
	<alpine.BSF.2.00.1207051217041.2447@wojtek.tensor.gdynia.pl>
	<CACY+Hvo9VTLBo9tFiTESz9RFYJnheGRSF-0DL8mFwXO3CZsR7A@mail.gmail.com>
	<alpine.BSF.2.00.1207051247400.4436@wojtek.tensor.gdynia.pl>
	<CACY+HvoE+aJQ-WERO8o94KVELNiORo7e6xc3mN9Sji92o1QNyg@mail.gmail.com>
	<alpine.BSF.2.00.1207051329200.4746@wojtek.tensor.gdynia.pl>
	<CACY+HvqszD4FprARqj6RJS86bwRivDH2SBv-p-qfiRAuikAiwA@mail.gmail.com>
	<alpine.BSF.2.00.1207051637580.2537@wojtek.tensor.gdynia.pl>
Date: Fri, 6 Jul 2012 00:28:32 +0200
Message-ID: <CACY+Hvpb08W4bJgucJb1ghVf-JgPZs0869qVxFrYRtXEF917wA@mail.gmail.com>
From: Carsten Mattner <carstenmattner@gmail.com>
To: Wojciech Puchar <wojtek@wojtek.tensor.gdynia.pl>
Content-Type: text/plain; charset=ISO-8859-1
Cc: freebsd-questions@freebsd.org
Subject: Re: FreeBSD vs Hurd what is the differences?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Jul 2012 22:28:33 -0000

On Thu, Jul 5, 2012 at 4:39 PM, Wojciech Puchar
<wojtek@wojtek.tensor.gdynia.pl> wrote:
>>> As for reading anything else than internal firefox data it is not
>>> possible
>>> except very basic bug is there.
>>
>>
>> Yes otherwise all the flash sites would have gathered files from local
>> disks.
>
>
> true. javascript activity is sandboxed. But within that sandbox there are
> million bugs.
>
> i've already seen trojans that completely took control over firefox.
> But - in spite it was windoze - ONLY firefox. Everything else was fine.
>
> Deleting firefox user data removed the trojan.

Nothing is impossible at that complexity.

I'd still like to know what Julian saw as you didn't see that.
Did it really contain a script which made it fetch random files from the
local disk? Julian? Which Firefox version? I am a little concerned.

>> There are some new Browser APIs which allow you to create files and
>> only the site that created and owns the file may access it.
>
> From what version?

http://people.mozilla.com/~tglek/velocity2012/
https://wiki.mozilla.org/WebAPI/FileHandleAPI
Planned as a supplement or replacement for IndexedDb it seems.