3 ms·
> It's virtually impossible to run a Windows (or Linux, or Mac) installation with the usual suspects--Java, Flash, Adobe Reader, etc.--without being exposed to
by diminoten 13y ago
> It's virtually impossible to run a Windows (or Linux, or Mac) installation with the usual suspects--Java, Flash, Adobe Reader, etc.--without being exposed to good old, non-targeted malware. Take into account that most of it is distributed from "good" sites, and "if I don't see it, it must mean there's nothing there" and "I never go to any risky sites" prove pretty silly.
Do you have more information about this? I wasn't aware that malware was just "floating" out in the ether. I have been staunchly in the camp of, "If you know what you're doing you can remain safe." but you seem convinced otherwise. Why?
- thirsteh 13y agohttps://www.google.com/transparencyreport/safebrowsing/malware/#region=ALL&period=90&size=LARGE&compromised&attack&asn=57010&page=1 https://www.google.com/transparencyreport/safebrowsing/malwa... See "Compromised sites" at the bottom. In my experience, compromised sites and insecure ad networks are by far the most common means of distributing malware through legitimate sites. Even if you know what you are doing, you are very likely to come across sites running e.g. Wordpress, Drupal, etc. with shitty addons, e.g. timthumb, that have been compromised and are serving exploits through hidden iframes, redirecting you to bad pages, etc.
- diminoten 13y agoWhat percentage of those exploits are 0day? Part of "knowing what you're doing" involves keeping your software up to date, after all. Commodity malware isn't a large threat if it can't run. Very cool link though, thanks.
- thirsteh 13y agoI don't know (presumably few to none if Google is detecting them), but yes, I agree. You can be exposed but not be vulnerable.