New attack that cripples HTTPS crypto works on Macs, Windows, and Linux
Wait, what... malicious dhcp can "force" browsers to execute essentially arbitrary code for every request? And this is <i>by design</i>? Is there some flag to nuke that feature from eg Firefox?