5 ms·
Are elinks users safe?
by xyproto 8y ago
Are elinks users safe?
- sitkack 8y agoAre elinks users safe from AFL ? If you are using elinks not in at least a container, you are asking for pownage.
- jwilk 8y agoWhat's AFL?
- sitkack 8y agohttp://lcamtuf.coredump.cx/afl/ http://lcamtuf.coredump.cx/afl/
- jwilk 8y agoOh, I know this AFL. But it didn't make sense in the context of your question, so I assumed you meant something else. What do you mean by being "safe from AFL"?
- sitkack 8y agoWell, elinks is a cul-de-sac, and AFL would probably obliterate it, so elinks users are most probably putting themselves in more danger than they avoiding.
- shakna 8y agoelinks aren't safe, full stop. A failure to verify SSL certificates has plagued elinks since 2012 [0]. Some versions protect, but the bug returns. [0] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=694658 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=694658
- jwilk 8y agoelinks doesn't render iframes, so this attack wouldn't work.