On 12/8/2016 7:10 AM, Jonathan Marquardt wrote:
Such an attacker could insert some JS or cookies etc. to track a user around the web or more dangerous attacks like stealing user data. The possibilities of JS are far-reaching. In the worst case scenario, JS can be used to exploit a user's device and gain priviliges within the OS. Such an attack has just been discovered last month *on this mailing list right here.*
Details? Missed that memo. -- tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk