3 ms·

I certainly agree in principle, but maybe we don't judge the sides the same way. ... I saw one study claiming the majority of PCs (59%) are pwned by malware. H

• marshray 16y ago
  How many of those attacks came through Javascript, though? The majority of the opportunistic drive-by web malware seems to depend on script. Sometimes the vulnerability is in the Javascript interpreter itself, sometimes the attacker wants to lightly obfuscate web sites and payloads from scanners, and sometimes it seems the malware authors are just lousy web designers using script gratuitously. If you also eliminate Adobe products from your attack surface, you've bypassed a huge percentage of web malware. Of course if you're the subject of a targeted attack then all bets are off. It would be interesting if there were a public resource that keeps track of attack vectors, so we could accurately assess the risks. There are many, but for specific bugs they try to agree on at least the central "CVE" number: http://cve.mitre.org/ http://cve.mitre.org/ http://web.nvd.nist.gov/view/vuln/search-results?query=javascript http://web.nvd.nist.gov/view/vuln/search-results?query=javas... http://www.kb.cert.org/vuls/ http://www.kb.cert.org/vuls/ For attack vectors in general, see: http://cwe.mitre.org/data/slices/2000.html http://cwe.mitre.org/data/slices/2000.html http://cwe.mitre.org/ http://cwe.mitre.org/