Java vulnerability in IE and Opera

Strange warning: a researcher reports a vulnerability in the Java functions of both IE and Opera. He alerts Microsoft, Opera and the whole world on the same day.
Wouldn't disclosing it some time after alerting the publishers of the browsers be more sensible?

report here

(it seems to be a nasty bug...)

 

Looks like this guy wants to make a name for himself

 

It looks a bit like cloaking, the trick that led to some Dutch companies that used the trick to being punished by Google by not indexing their sites... (Dutch language link)

 

Look's relatively minor on its own.

I suppose so, but if you are truly relying on an AV to protect you from a known JS exploit, you are already on very thin ice already. (BTW, I doubt this trick works perfectly)

If I had some zero day browser exploit unknown to the world, I would combine it with this trick to have analysis of my exploit harder. But on it's own, this exploit is interesting but not that serious IMHO.

Yet another way of cloaking, *yawn*, much easier ways to do it.

BTW, shouldnt the subject read "JAVASCRIPT" not Java vulnerability?