4 ms·

They're weaponizable when using a small and rapidly shrinking percentage of unpatched browsers running JavaScript delivered by extremely uncommon websites.

• tptacek 9y ago
  That's true because the vulnerability itself wasn't overblown, and was immediately patched.
  • yuhong 9y ago
    I am particularly talking about things like Intel's stock price though
    • tptacek 9y ago
      Oh. Sure, I buy that. I don't believe patchable vulnerabilities really exert major pressure on stock prices.
• api 9y ago
  Attacks only get better.
• Buge 9y ago
  >JavaScript delivered by extremely uncommon websites All it takes it emailing them a slightly convincing link, and they're running javascript from one of those "extremely uncommon websites". It doesn't matter how common the website it, a single website can compromise millions of users.