Firefox Security "Hoax" Performed at Microsoft-Sponsored Hacker Convention (Continued)

The Story Continues

In yesterday's post, I wrote about the recent dubious claims of Firefox security holes. Today I've found some additional reading on the subject.

As mentioned in the article titled Firefox Flaw a Hoax, Admits Speaker, these Firefox vulnerability announcements at a Microsoft-sponsored hacker convention were not factual:

"The main purpose of our talk was to be humorous," admitted Mischa Spiegelmock, in a statement made through Mozilla.org this afternoon.

"As part of our talk we mentioned that there was a previously known Firefox vulnerability that could result in a stack overflow ending up in remote code execution. However, the code we presented did not in fact do this, and I personally have not gotten it to result in code execution, nor do I know of anyone who has.

"I have not succeeded in making this code do anything more than cause a crash and eat up system resources, and I certainly haven't used it to take over anyone else's computer and execute arbitrary code," Spiegelmock added.

As the article points out, the bio for the other perpetrator states that "Andrew Wbeelsoi ruins things on the Internet professionally."