3 ms·
I mean yes and no. Assuming there was an exploit that broke out of the Firefox sand box you are correct that any connection is via tor. Though tails isn't 100
by vorticalbox 3y ago
I mean yes and no.
Assuming there was an exploit that broke out of the Firefox sand box you are correct that any connection is via tor.
Though tails isn't 100% sure, you could chain a Firefox cve + user land to root and then turn off the to routing rules.
- yieldcrv 3y agoadministrator/root is turned off by default, and even if the user turned it on during boot, they would still have to be tricked into approving or putting in their password again, am I missing something about the veracity of possible exploits?
- vorticalbox 3y agoThere are some exploits that allow for gaining root access. One that comes to mind is dirty sock[0]. It uses a vulnerability in the snap api to create a root user. https://github.com/initstring/dirty_sock/blob/master/dirty_sockv2.py https://github.com/initstring/dirty_sock/blob/master/dirty_s...