3 ms·
Every browser exploit in the last few years that I've heard about requires Javascript enabled, except for history sniffing trickery.
by lincolnq 16y ago
Every browser exploit in the last few years that I've heard about requires Javascript enabled, except for history sniffing trickery.
- m0tive 16y agoThis is the main reason I also use NoScript. Just today I saw two very tech savvy friends get caught out by a Facebook clickjacking attack. With javascript off on untrusted domains, it didn't work for me.
- sant0sk1 16y agoWasn't there a recent study that concluded that Flash was the source of over 90% of all vulnerabilities last year?
- lincolnq 16y agoI'm not sure, but NoScript also blocks Flash for me, so the outcome is the same.
- angelbob 16y agoSure, but Flash is also straightforward to disable. It's not even installed by default in most browsers.
- code_duck 16y agoFlash and Acrobat were in the top 5, but I don't think Flash can take credit for a full 90%.