#lolwat firefox hidden pref security.turn_off_all_security_so_that_viruses_can_take_over_this_computer bugzilla.mozilla.org/show_bu… #pwn2own

984012 - Consider removing the security.turn_off_all_security_so_that_viruses_can_take_over_this_...

NEW (nobody) in Core - XPConnect. Last updated 2023-06-19.

bugzilla.mozilla.org
4
131
81
Replying to @isislovecruft
@isislovecruft If the name were less scary, webdevs hitting security restrictions would tell users to go to about:config to change the pref

Mar 20, 2015 · 12:11 AM UTC

1
1
1
Replying to @davidbaron
@davidbaron Right. (As you probably know, that's how it got the name: bugzilla.mozilla.org/show_bu….)
1
@davidbaron Rather than its name, I'm frightened the pref is respected in release builds—1-bit arbitrary write shouldn't equal code exec.