3 ms·

I forgot to mention I don't visit any questionable sites whatsoever. The problem isn't questionable sites (including ad networks), it's 0 days and hacked sites

I forgot to mention I don't visit any questionable sites whatsoever. The problem isn't questionable sites (including ad networks), it's 0 days and hacked sites. uMatrix won't protect you from malicious js fed from the same site, or perhaps a malicious malformed font download[1]. [1] https://threatpost.com/of-truetype-font-vulnerabilities-and-the-windows-kernel/101263/ https://threatpost.com/of-truetype-font-vulnerabilities-and-...

Bartweiss 7y ago
Yes, exactly. The bad news is that most antivirus software also won't protect you from a hacked NYT server delivering 0-days, because it's generally reactionary. For this reason, I mostly don't worry too much about about while-browsing protection - if you're cautious, the remaining threats will also evade antivirus. In that sense, uMatrix and NoScript are more proactive. (uMatrix, for example, saved people from Magecart before it was ever discovered.) But if you do pick something up, there's no guarantee it'll be nice obvious ransomware, rather than something quietly sniffing your keystrokes. That's where I advocate antivirus even for careful users - it's a repository of known threats to tip you off that something is wrong. DoublePulsar was first discovered infecting Windows machines in the wild, so cautious browsing didn't save the people that hit.