billionlaughs, on me :-(( - on winXP help!

[jmdeschamps]

Looking up different blogs etc on xml parsers I wind up on the site of
Computer stuff, www.razorvine.net.
And in the browser torture section, the billionlaughs.xml link (that
you shouldn't use if you don't know what your doing, as was my case
(mea culpa))
Thinking I was about to crash the browser, I look up the web for
assorted advice and find nothing except a post about the *killer xml
file*...
So hereb goes nothing... click, hang, reboot, hangs, (mouse pointer
moves, that's it folks) the disk spins occasionally, the vents go up
mad, I guess the CPU is working - have know idea on what.
I'm able to boot in safe mode but don't know what to do next?

Any ideas ?

Further details?

Thanks in advance
(I know this is not directly related to python, but regulars here are
my only source of knowledge to this point, on this "Billion Laughs" DoS
attack)

Jean-Marc

[Fredrik Lundh]

jm*********@gmail.com wrote:

Looking up different blogs etc on xml parsers I wind up on the site of
Computer stuff, www.razorvine.net.
And in the browser torture section, the billionlaughs.xml link (that
you shouldn't use if you don't know what your doing, as was my case
(mea culpa))
Thinking I was about to crash the browser, I look up the web for
assorted advice and find nothing except a post about the *killer xml
file*...
So hereb goes nothing... click, hang, reboot, hangs, (mouse pointer
moves, that's it folks) the disk spins occasionally, the vents go up
mad, I guess the CPU is working - have know idea on what.
the billion laughs attack is a carefully constructed XML file that takes
requires an immense number of CPU cycles to parse...
I'm able to boot in safe mode but don't know what to do next?

reboot as usual, and the next time you see a link that says "do NOT
click if you don't know what you're doing", don't click on it.

</F>

[Fredrik Lundh]

Fredrik Lundh wrote:

takes requires

that'll teach me to post to comp.lang.python while watching football...

</F>

[jmdeschamps]

Fredrik Lundh wrote:

jm*********@gmail.com wrote:

Looking up different blogs etc on xml parsers I wind up on the site of
Computer stuff, www.razorvine.net.
And in the browser torture section, the billionlaughs.xml link (that
you shouldn't use if you don't know what your doing, as was my case
(mea culpa))

....
reboot as usual, and the next time you see a link that says "do NOT
click if you don't know what you're doing", don't click on it.

</F>

Right ;-)
and thanks for your very fast reply !

[Irmen de Jong]

jm*********@gmail.com wrote:

Fredrik Lundh wrote:

jm*********@gmail.com wrote:

Looking up different blogs etc on xml parsers I wind up on the site of
Computer stuff, www.razorvine.net.
And in the browser torture section, the billionlaughs.xml link (that
you shouldn't use if you don't know what your doing, as was my case
(mea culpa))

...

reboot as usual, and the next time you see a link that says "do NOT
click if you don't know what you're doing", don't click on it.

</F>

Right ;-)
and thanks for your very fast reply !

The site is mine.
And sorry for crashing your computer...
But there really is a warning there to not click on it, like Fredrik
pointed out ;-)

You *can* try the millionlaughs version though, that more or less
shows what the problem is. And it is small enough to not crash your
browser. Right click on any of the link and "save link as" to download
the XML file for viewing in your favorite editor.... :)

Cheers,
--Irmen de Jong