[xyproto]

Are elinks users safe?

[shakna]

elinks aren't safe, full stop.

A failure to verify SSL certificates has plagued elinks since 2012 [0]. Some versions protect, but the bug returns.

[0] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=694658

[jwilk]

404 Footnote Not Found

[shakna]

... Thanks. Apologies, I'm having arguments with my assisted keyboard.

[sitkack]

Are elinks users safe from AFL ? If you are using elinks not in at least a container, you are asking for pownage.

[jwilk]

What's AFL?

[sitkack]

http://lcamtuf.coredump.cx/afl/

[jwilk]

Oh, I know this AFL. But it didn't make sense in the context of your question, so I assumed you meant something else.

What do you mean by being "safe from AFL"?

[sitkack]

Well, elinks is a cul-de-sac, and AFL would probably obliterate it, so elinks users are most probably putting themselves in more danger than they avoiding.

[jwilk]

elinks doesn't render iframes, so this attack wouldn't work.