3 ms·
I wonder how long this will remain compiled into the official versions of Firefox and Chrome after it starts being used by malware. Also if anyone has used thi
by j_s 10y ago
I wonder how long this will remain compiled into the official versions of Firefox and Chrome after it starts being used by malware.
Also if anyone has used this to document everything Chrome sends back to the mother ship with its pinned certs.
And finally if it will be possible to implement something similar for IE and the rest of Windows (spyware/analytics) with Alex Ionescou's soon-to-be-released kernel driver interception framework.
- twr 10y agoIf malware can set arbitrary environment variables, it can also typically analyze and/or modify browser memory.
- mcguire 10y agoHow so? It would seem like a minor configuration change would be unrelated to accessing a process's memory. But I'm not a security guy.
- wiredfool 10y agoI was looking at an anti-malware endpoint security product today. I have to use it, but I'm seriously dubious as to how useful it's going to be. Saw this article. Hey, hey, what do you know. First try with wireshark and I'm reading the ssl from the protected computer.