3 ms·
Signed software doesn't matter when it comes to the most common methods of execution: Java, Flash, PDF exploits, Flash objects embedded in Microsoft Word docume
by runjake 14y ago
Signed software doesn't matter when it comes to the most common methods of execution: Java, Flash, PDF exploits, Flash objects embedded in Microsoft Word documents currently bypass the sandboxing in both Word and Adobe Flash.
In other words, this isn't going away.
- krichman 14y agoSounds like they need a better sandbox :) Signing does matter. Those may still be exploitable to run arbitrary code, but you cannot write code to disk that will get executed on start-up. The victim would have to open the same PDF every time they use their computer.
- tomjen3 14y agoRead the article. They aren't clever enough to do that, they just get their users to install the software for them.