550196 - Last Measure shock site now opens a new window and prevents closing it

Status: RESOLVED WORKSFORME

(Firefox :: Security, defect)

Description

[alfred]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6 GTBDFff GTB7.0
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6 GTBDFff GTB7.0

can anyone tell me whats this ?

Reproducible: Always

Comment 1

[alfred]

http://bit.ly/b81Sjx

Comment 2

[Benjamin Smedberg]

Visiting the link will open a window which takes over and cannot be closed. It appears to try and exploit a bunch of security flaws. Marking s-s for now since visiting the link will DOS your computer with NSFW stuff.

Comment 3

[Jesse Ruderman]

It appears to be a redirect to http://lm.loldongs.eu/ aka Last Measure.  Last Measure is hardly secret.  See e.g. bug 349392.

Comment 4

[Jesse Ruderman]

Attachment: Last Measure source code 2010-03-04

Comment 5

[Jesse Ruderman]

Attachment: testcase: keyboard shortcut interference

One of Last Measure's tricks is to pop up alerts when it thinks you're going for close-window shortcuts such as Ctrl+W or Alt+F4.  The original code was Windows/IE specific; here's a cleaned up version.

The solution here is bug 59314 or bug 61098.

Comment 6

[alfred]

well ctrl-w not works .. i tried and even after i force closed from tasks when i opened again firefox it start again

Comment 7

[Jesse Ruderman]

Attachment: testcase: one click opens many popups

Given any opportunity to open popup browser windows -- such as a click anywhere in the page -- Last Measure will open SIXTEEN of them.  This is probably more than we should allow per click.

Comment 8

[Jesse Ruderman]

Filed bug 550238 for the popups-per-click issue.

Comment 9

[Jesse Ruderman]

I can't reproduce bsmedberg's experience, but that might be because I have Flash and Java disabled.

Comment 10

[Jesse Ruderman]

Attachment: testcase: onkeydown popups

We already disallow these.  Go us.

Comment 11

[Biju]

Please test it in nightly 
http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/latest-trunk/

I think this is no longer an issue after Bug 61098 fix...