3 ms·
Which is its own attack vector: https://news.ycombinator.com/item?id=14296959 https://news.ycombinator.com/item?id=14296959
by js2 10y ago
Which is its own attack vector:
https://news.ycombinator.com/item?id=14296959 https://news.ycombinator.com/item?id=14296959
- ecma_horse 10y agoThe problem here is that the file is being scanned without the user even attempting to run it. A similar vector would be file previews (thumbnails) or indexing. If the user is about to execute a malicious file anyway, then scanning it before only adds protection.
- danieldk 10y agoThe problem is more that the standard model for applications is 'can access the whole filesystem, can write to the user's home directory'. The default model should change to sandboxing an application without any permissions.