5 ms·
I have been waiting for years for attacks that operate entirely within the sandbox and steal cookies from memory, for example. What is more valuable that your G
by dguido 10y ago
I have been waiting for years for attacks that operate entirely within the sandbox and steal cookies from memory, for example. What is more valuable that your Google cookies in a modern browser session? Who cares about machine access?
- justinschuh 10y agoI think we've seen it once so far, for a Flash exploit that didn't have a sandbox escape in Chrome.
- groovy2shoes 10y agoPPAPI plugins are sandboxed. That's their major difference from NPAPI plugins. The API itself is otherwise extremely similar.
- justinschuh 10y agoI think you may be confused about who you're replying to and what subject you're replying on.
- groovy2shoes 10y agoUpon re-reading the thread, I think you're right. Sorry!
- justinschuh 10y agoNo worries. :)
- groovy2shoes 10y agoAnd, upon looking at your profile, I'm putting my foot in my mouth. Like, the whole thing, heel and all. :)