Re: [VulnWatch] Re: Concurrency-related vulnerabilities in browsers - expect problems

2006-08-17 Thread Steven M. Christey
Some interesting work. For those who haven't made the connection yet - concurrency issues probably go far beyond just web browsers. It's a safe bet that *any* software that's multi-threaded, multi-process, event-based, or asynchronous could have these sorts of issues. Traditional data manipulat

RE: [VulnWatch] Re: Concurrency-related vulnerabilities in browsers - expect problems

2006-08-17 Thread Michael Wojcik
> From: Steven M. Christey [mailto:[EMAIL PROTECTED] > Sent: Thursday, 17 August, 2006 14:05 > > [Re Michal Zalewski's recent publications of concurrency issues in > browsers] > > Some interesting work. > > For those who haven't made the connection yet - concurrency issues > probably go far beyo

Re: [VulnWatch] Re: Concurrency-related vulnerabilities in browsers - expect problems

2006-08-18 Thread Michal Zalewski
On Thu, 17 Aug 2006, Steven M. Christey wrote: > In other words - concurrency is a rich area for future research Or past research, for that matter ;-) http://en.wikipedia.org/wiki/Therac-25 The lesson learned is... uh... /mz