3 ms·
High-value zero days like what you're describing would not get wasted on stealing bank information from random working schlubs like us. I think it is a reasona
by nwiswell 4y ago
High-value zero days like what you're describing would not get wasted on stealing bank information from random working schlubs like us.
I think it is a reasonable approach to personal information security to focus on ensuring that you are robust to families of exploits which have concrete proof of concept in practice, and not wasting calories worrying about stuff that is (for the time being) mostly theoretical.
This advice obviously does not apply if you are protecting valuable corporate IP, or a repository of personal information, or god forbid national security secrets.
- bravetraveler 4y agoOh, definitely - it wouldn't be used for trivial things like that, at least not for quite a while. [Edit: hopefully having better mitigations in hardware by then] My comment didn't follow the thread particularly well, I wasn't so much worried about the everyday person - just that this could be weaponized [against someone/thing] My worry about this really goes as far as... keep the mitigations enabled. That's it. A lot of people disable them today because they're aren't dangerous today - if nothing else, offering a countering opinion to change that trend.
- BeefWellington 4y ago> High-value zero days like what you're describing would not get wasted on stealing bank information from random working schlubs like us. I used to believe this was true. Then someone who had access to post tweets as very famous public figures used it to steal bitcoin.