Slashdot Mirror

← Back to Stories (view on slashdot.org)

AJAX May Be Considered Harmful

Posted by Zonk on from the web-20-needs-vitamins dept.

87C751 writes "Security lists are abuzz about a presentation from the 23C3 conference, which details a fundamental design flaw in Javascript. The technique, called Prototype Hijacking, allows an attacker to redefine any feature of Javascript. The paper is called 'Subverting AJAX' (pdf), and outlines a possible Web Worm that lives in the very fabric of Web 2.0 and could kill the Web as we know it."

1 of 308 comments (clear)

  1. Re:FUD? by Anonymous Coward · · Score: -1, Offtopic
    Way off topic, but I had to respond to your sig.
    It's abuse to mod a comment Overrated, Flamebait or Troll just because you disagree with it. The goal is to share ideas.
    The goal is to share knowledge. Every friggin' moron and "product-X fanboy" on the planet has "ideas". Lots of posts deserve to be modded Overrated because I disagree with them. (Ones offering "proof", based on passages in books of dubious origin, that the Earth is 6000 years old come to mind.) It's only because we lack a moderation option of "Horseshit!" that this is the case.

    People with stupid ideas deserve bad karma.