3 ms·

Speaking of slippery slopes, this "hack" probably falls under the broader meaning of the term. They probably put some kind of Flash banner on the page, and caug

Speaking of slippery slopes, this "hack" probably falls under the broader meaning of the term. They probably put some kind of Flash banner on the page, and caught all the people with improperly-configured systems.

mjevans 11y ago
IE, systems that run arbitrary code by default...
- jacquesm 11y ago
  > IE Indeed :)
belorn 11y ago
It was a javascript vulnerability, CVE-2013-1690. After free of a DocumentViewerImpl object, triggered via an specially crafted web page using onreadystatechange events and the window.stop() API, you could execute arbitrary code. http://resources.infosecinstitute.com/fbi-tor-exploit/ http://resources.infosecinstitute.com/fbi-tor-exploit/
- Buge 11y ago
  That was the 2013 instance. The FBI did it again in 2015 and that's what this article is about. The article specifically says it's probably different than the 2013 instance.
Buge 11y ago
Tor doesn't run flash by default. Also it sounds like Playpen gave information about how to stay safe from the FBI, so I don't know why people would change the Tor settings to enable flash.