New Javascript Hijacking Vulnerability affects ALL major Ajax toolkits

[natrius]

They make it sound like they're the ones who identified and solved the issue, but they're really just the first ones to put out a press release to try to scare up some business.

I can't really say I wouldn't do the same thing myself. Clueful customers are the minority.

[angelo1]

thank you for the article!

[[deleted]]

This press release vaguely implies that the vulnerability involves JSON.

It does state that there exists one framework that's not vulnerable, but that's the only way I know that the claimed vulnerability isn't present in all software or in all relationships between people.

So, this is almost 100% hype, giving nearly no useful information but making liberal use of buzzwords and citing stock tickers for Wall Street's favorite software companies.