Questions for new Iliad owners!

[arivero]

Originally Posted by herve

edit: I tried Firefox 2.0 beta and Gecko is version 1.8.1b1.

A lot of Gecko fanatics this year.

[CommanderROR]

would it be possible to run java-based applets that do more than just display system info then?

[DHer]

@arivero

right. i just thought that for a well-known browser might exist an exploit to get a shell on the concerned computer (or iliad in that case)

we'll see when our iliads arrive

[b_k]

Originally Posted by CommanderROR

would it be possible to run java-based applets that do more than just display system info then?

Java and JavaScript are things which are totally different.
Java is a programming language and requires the Java Runtime Environment to be installed on the target system.
JavaScript is, like the name implies, a Scripting language and executed by the browser itself.

Read Wikipedia for more info, thats what i remembered for short.

[arivero]

Originally Posted by CommanderROR

would it be possible to run java-based applets that do more than just display system info then?

Commander, not officially. Javascript is restricted and it can not write in the system explicitly. But as Dher tells, and I agree with him, exploits could work. Could be a temporary method until the SDK appears.

[arivero]

Ah, but for instance, you can write a javascript to make better pagination. That is perfectly legal and could enhance your browsing experience.

[arivero]

Originally Posted by DHer

@arivero

right. i just thought that for a well-known browser might exist an exploit to get a shell on the concerned computer (or iliad in that case)

we'll see when our iliads arrive

I am sorrry mine will take one week so I am coming late to the run. Yep I agree an exploit could happen easily.

[ali]

Originally Posted by arivero

[blabla...] could enhance your browsing experience.

Dude! You in Sales or Marketing?

[DHer]

whom do you tell this?

I'm also still waiting for the shipping confirmation.

[arivero]

Originally Posted by ali

Dude! You in Sales or Marketing?

No but I learnt english by reading commertial propaganda, er, PC journals

[arivero]

Originally Posted by DHer

@arivero

right. i just thought that for a well-known browser might exist an exploit to get a shell on the concerned computer (or iliad in that case)

we'll see when our iliads arrive

Actually we are in a very peculiar situation: we want an exploit for a machine we own.

[b_k]

stupid idea i thought and it was:
file:///bin/bash or file:///usr/bin/gnome-terminal is not worth a try. Would have been to easy.

Firefox doesnt allow to execute local binaries, neither 1.5 nor 2.0 beta will do. Should be obvious, but i thought it would be worth a try.

[DHer]

what happens if you do it?

Does it open a "Save file to" dialogue or just throw up an error?

[b_k]

Originally Posted by DHer

what happens if you do it?

Does it open a "Save file to" dialogue or just throw up an error?

i have to say, i tried that on Ubuntu here, but since the Iliad probably runs a Firefox 2.0 Alpha (if i compared the User agent correct) i thought it could react similar.

if you try the URLs, Firefox will open a "Save file to"-dialogue, but you have no option to choose to execute the file. I shouldn't even thought about that, for it is pretty obvious, that executing local applications from a browser would be a to great security risk.

[DHer]

Just tried it myself on a pc. You don't get a choice where to save it.
No cookie for this idea.

But there's one point: What happens if you put a link to "about:config" in your html file on your iliad?

if you can change the variable "browser.download.useDownloadDir" to false you get to choose where to save the file every time.