Click on the Hang button and watch the fun!

All right, so this attack is pretty harmless. It just hangs your browser and all you have to do is kill -9 the browser. It's hardly a threat to the global Internet. What's disturbing about it, however, is that it was the first JavaScript code I'd ever written. It took me a grand total of about 15 minutes to think up the attack and learn enough JavaScript to code it.

Now, I'm not a naturally devious person. I usually read descriptions of security holes scratching my head asking, "How did they ever think to try that!" So, if I can come up with a way of exploiting JavaScript in 15 minutes, what are the real bad guys going to come up with?

WARNING: Clicking on the Hang button will hang your browser if JavaScript is enabled.