Announcing cross_fuzz, a potential 0-day in circulation, and more

I am happy to announce the availability of cross_fuzz - a surprisinglyeffective but notoriously annoying cross-document DOM binding fuzzer thathelped identify about one hundred bugs in all browsers on the market - many of said bugs exploitable - and is still finding more.The fuzzer owes much of its...