4 ms·
Oh, you're right, no one's ever been able to exploit javascript in chrome ;) And you don't need to persist anything to disk, just get a key logger going in mem
by openasocket 9y ago
Oh, you're right, no one's ever been able to exploit javascript in chrome ;)
And you don't need to persist anything to disk, just get a key logger going in memory. Or scrape the data from your other processes. Once you get arbitrary code execution on the machine it's game over.
Seriously, I deal with this kind of stuff for a living. No one is immune to these kinds of attacks; not you, not me, not anyone.
- dmitrygr 9y agogoogle has a bug bounty ;) https://www.google.com/about/appsecurity/chrome-rewards/index.html https://www.google.com/about/appsecurity/chrome-rewards/inde... Feel free to submit your function exploits that you say are so easy to make
- openasocket 9y agoNever said browser exploits are easy to make. I just pointed out that many times phishing is about just clicking on the link, not getting people to actually type in their passwords.