Re: Supercookies

To: or-talk@xxxxxxxxxxxxx
Subject: Re: Supercookies
From: "Paul Ferguson" <fergdawg@xxxxxxxxxxx>
Date: Fri, 21 Aug 2009 07:47:55 GMT
Cc: or-talk@xxxxxxxxxxxxx
Delivered-to: archiver@xxxxxxxx
Delivered-to: or-talk-outgoing@xxxxxxxx
Delivered-to: or-talk@xxxxxxxx
Delivery-date: Fri, 21 Aug 2009 03:56:24 -0400
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=netzero.net; s=alpha; t=1250841381; bh=47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=; l=0; h=X-UNTD-OriginStamp:From:Date:To:Cc:Subject:Message-Id: Content-Type; b=AgmGguwc9PMWD05DCvJIF1f9IUuQwDweY2/XUZlMQBitRWUdZvJB1D/+iJvjfu9QH 11o04HMbad6EGm6eW2q+bS3Mbt9jf9EGIenULRDfhv+9+EkNKDhHh0F2RA1LzqLfKb /0dSWLTB/E3FThooAD1JY4Eu/0ghSIhsq09Jfwl8=
Reply-to: or-talk@xxxxxxxxxxxxx
Sender: owner-or-talk@xxxxxxxxxxxxx

> Uuups, it seems BetterPrivacy allows remote code execution:

Easily defeated:

http://objection.mozdev.org/

- ferg