3 ms·
Those at least have to be downloaded and installed by the user, which indicates a high level of intent/consent and is difficult to do accidentally. In the brows
by cosmic_cheese 2y ago
Those at least have to be downloaded and installed by the user, which indicates a high level of intent/consent and is difficult to do accidentally. In the browser environment, malicious content can be navigated to without any user intent or consent whatsoever, which when combined with holes punched in browser sandboxes for the sake of fancy features makes for danger with a dramatically larger scope.
- DecoySalamander 2y agoRight now, most untrusted code runs in the browser's sandbox, and that's great - outside of the realm of fancy 0 days, the damage is limited. But if downloading apps becomes the norm again (like every online store asking you to get their app and an extra app for a discount program), I expect that socially engineering less technical users into downloading malware will become much easier.