Re: Firefox W^X isn't a part of Pwn2Own contest

2016-02-27 Thread Lampshade
About X.Org isolation I have heard of Xpra - "screen for X11" but haven't used this yet.

Re: Firefox W^X isn't a part of Pwn2Own contest

2016-02-20 Thread Lampshade
Do you also sandbox the browser with some sort of remote desktop, or run under a separate X session? AFAIK X allows any program to meddle with any other program under the same display. No, I don't. Setup is easy. In the easiest scenario just create user, add to /etc/sudoers line which lets you run

Re: Firefox W^X isn't a part of Pwn2Own contest

2016-02-17 Thread Alexey Suslikov
David Coppa gmail.com> writes: > Il 17/feb/2016 14:52, "Lampshade" poczta.fm> ha scritto: > > > > Does original Firefox compiled by Mozilla running on Windows > > have W^X? I bet: no, it doesn't. > > Not until Firefox 46. It *is* already in Nightly builds (but too hard for big guys to cope wit

Re: Firefox W^X isn't a part of Pwn2Own contest

2016-02-17 Thread Kamil CholewiƄski
On Wed, 17 Feb 2016, Lampshade wrote: > Does original Firefox compiled by Mozilla running on Windows > have W^X? I bet: no, it doesn't. > I run browsers on the other user account in OpenBSD. Do you also sandbox the browser with some sort of remote desktop, or run under a separate X session? AFAIK

Re: Firefox W^X isn't a part of Pwn2Own contest

2016-02-17 Thread David Coppa
Il 17/feb/2016 14:52, "Lampshade" ha scritto: > > Does original Firefox compiled by Mozilla running on Windows > have W^X? I bet: no, it doesn't. Not until Firefox 46.

Firefox W^X isn't a part of Pwn2Own contest

2016-02-17 Thread Lampshade
Does original Firefox compiled by Mozilla running on Windows have W^X? I bet: no, it doesn't. I run browsers on the other user account in OpenBSD.

Firefox W^X isn't a part of Pwn2Own contest

2016-02-17 Thread Alexey Suslikov
Made my day. http://www.eweek.com/security/pwn2own-hacking-contest-returns-as-joint-hpe- trend-micro-effort.html Quote: One change in the 2016 event is that the Mozilla Firefox Web browser is no longer part of the contest. "We wanted to focus on the browsers that have made serious security imp