• We've upgraded our forums. Please post any issues/requests in this thread.

HTML5 exploit

Joined
Sep 1, 2010
Messages
5,903 (2.21/day)
Likes
6,572
#1
Web developer Feross Aboukhadijeh created FillDisk.com in order to demonstrate the exploit in HTML5. The Web Storage standard used in HTML5 allows any website to place large amounts of data on your computer’s drive, which could result in a lot of frustration as the user will probably continually wonder why their hard drives are completely out of disk space.

Web browsers have the ability to limit just how much space websites can dump onto your hard drive, with Mozilla Firefox being able to intelligently know how much a website should be loading onto the hard disk at a time. Other browsers, such as Chrome, IE, Safari and Opera currently have no storage limits, although we hope now that this exploit has been publicized, the developers of these web browsers would look into patching their software so our computer hard disks can stay from being clogged up with junk data.
Sounds nasty

 
Last edited by a moderator:
Joined
Nov 16, 2007
Messages
557 (0.15/day)
Likes
118
Processor i7 920
Motherboard SABERTOOTH X58
Cooling Fans
Memory 24 GB Kingston HyperX 1600
Video Card(s) gtx460
Storage spinners
Display(s) Dell 2001F
Case Lian Li
Audio Device(s) onboard
Power Supply X750
Software win 7 x64 pro
Benchmark Scores fast...
#2
Firefox is king again!
 

Krazy Owl

New Member
Joined
Jan 12, 2012
Messages
897 (0.41/day)
Likes
76
Location
Montreal
System Name HTPC-Cube
Processor AMD Athlon 64 skt754 3200+ 1M cache
Motherboard Foxconn Winfast K8S760MG-6LRS
Cooling Stock
Memory 2 gigs DDR400
Video Card(s) HIS IceQ 4670 AGP 1gig DDR3
Storage White label 80gigs sata
Display(s) Polaroid 19 inches 1366X768 LED
Case Chenming cube
Audio Device(s) Onboard
Power Supply Raidmax RX-500S
Software Seven Pro 64bits
#3
What about Google chrome compared to firefox vs explorer.... is google chrome safe too ?
 
Joined
May 27, 2008
Messages
3,577 (1.02/day)
Likes
533
Location
Huddersfield, uk
Processor E8200
Motherboard Asus P5KC
Cooling cooler master hyper tx3, 2x 120mm, 1x 80mm
Memory 4 GB DDR3 OCZ Black Edition
Video Card(s) Gigabyte HD 2600xt silent pipe II
Storage 500GB WD Sata / 60 GB Samsung IDE
Display(s) 20" samusng LCD, gaming at 1680 x 1050
Case some old amd thing
Audio Device(s) onboard
Power Supply 650W
Software Windows 8.1, with 'start is back' obviously
Benchmark Scores It boots whilst im still young so im pleased with that.
#4
Joined
Jul 5, 2008
Messages
272 (0.08/day)
Likes
65
System Name WorkStation
Processor Intel i7 3770k @ 4.4GHz
Motherboard ASRock Z77 Extreme6
Cooling Corsair H110 Water Cooler AIO
Memory Corsair Vengeance 8GB DDR3 1600MHz
Video Card(s) MSI GTX680 Twin Frozr III OC
Storage WD 1TB Sata III
Display(s) Samsung 22-inch LED 1080p
Case Corsair Carbide Air 540
Audio Device(s) Onboard Realtek 898 HD
Power Supply Corsair CS750M Gold
Software Windows 8.1 Pro x64
#5
Why would anyone dump data from their website? and loose bandwidth... its not free you know...
 
Joined
May 27, 2008
Messages
3,577 (1.02/day)
Likes
533
Location
Huddersfield, uk
Processor E8200
Motherboard Asus P5KC
Cooling cooler master hyper tx3, 2x 120mm, 1x 80mm
Memory 4 GB DDR3 OCZ Black Edition
Video Card(s) Gigabyte HD 2600xt silent pipe II
Storage 500GB WD Sata / 60 GB Samsung IDE
Display(s) 20" samusng LCD, gaming at 1680 x 1050
Case some old amd thing
Audio Device(s) onboard
Power Supply 650W
Software Windows 8.1, with 'start is back' obviously
Benchmark Scores It boots whilst im still young so im pleased with that.
#6
Maybe who ever it is that developed HTML 5 thought the same and that's why it got overlooked?
 
Joined
Nov 10, 2006
Messages
4,527 (1.12/day)
Likes
6,075
Location
Washington, US
System Name Lappy
Processor i7 6700k
Motherboard Sager NP9870
Cooling A lot smaller than I'd like
Memory Samsung 4x8GB DDR4-2133 SO-DIMM
Video Card(s) GTX 980 (MXM)
Storage 2xSamsung 950 Pro 256GB | 2xHGST 1TB 7.2K
Display(s) 17.3" IPS 1080p G-SYNC
Audio Device(s) Sound Blaster X-FI MB 5, Foster 2.1 channel integrated
Mouse Razer Deathadder
Keyboard 3-zone RGB integrated
Software Windows 10 Pro
Benchmark Scores Not slow
#8
The HTML5 standard DOES NOT allow this. The fault isn't with HTML5, the fault is with IE, Chrome, Safari, Opera, and Firefox for not implementing it properly.

Why would anyone dump data from their website? and loose bandwidth... its not free you know...
They're probably pulling it from cache.