Hacker News new | ask | show | jobs
by OmgImAlexis 4099 days ago
Interestingly enough the links on Reddit don't seem to crash Chrome but the cortexture.net link from Github does. I'm running Chrome 41.0.2272.101 m (64-bit) on Windows 8.1
1 comments

It seems hit or miss so far- Shardj just pointed out that https:// doesn't seem to crash at all.
That might make sense, since I'm seeing the same behaviour but have SSL enabled for Reddit.
Could be. My concern is:

1) Most people don't have SSL enabled for most (if any) sites that are optional.

2) Most normal users are using the standard build for MacOS/Win, not the dev channel, and not Linux.

3) This requires no XSS or anything remotely tricky. Just a couple hundred bytes of HTML, and that's it.

4) Most web forum filters and formatting code (including Markdown) let this thru just fine.

Maybe I'm blowing it out of proportion, but if you wanted to be a jerk to a whole lot of people very easily, you probably could.

EDIT: Grammar

Oh, for sure. There are plenty of attack vectors for this sort of thing, I just find the SSL behaviour interesting.