3 ms·
[read a bit too fast, my bad]
by mindcrash 2y ago
[read a bit too fast, my bad]
- bawolff 2y agoI was thinking they meant some cloud office 365 thing, so not the local computer. Regardless though, once you have a web browser 0-day its usually not very hard to convince a user to click on a link. Especially for a targeted attack.
- mindcrash 2y agoYeah, I thought it was running locally but it runs in Microsofts cloud. However, that opens up ANOTHER similar attack vector as Bert is saying: "We may wonder also what fun a determined hacker could have with Microsoft running random bits of JavaScript on their servers and allowing these to talk to the world (or to Microsoft itself even)."
- bawolff 2y agoI feel like not that much. Presumably its something like pupeteer running in a dedicated cloud account with very little access to anything else. Like its possible you could get something there, but i could think of a lot more juicy targets if you have a chrome 0-day.