4 ms·

Is there any good way to tell if you've been compromised by this exploit?

• martinml 13y ago
  I guess you could close all your applications and watch traffic with Wireshark for a while, since antivirus software doesn't seem to be very proactive in this cases. Fortunately this kind of exploits seem to go for the low-hanging fruit: outdated plugins like Java, Flash or Acrobat. If you have any of those enabled and not up-to-date, you're vulnerable. The sensible recommendation seems to be use some form of click-to-play scheme, depending on your browser.
• smsm42 13y ago
  If you don't enable Java/Flash/etc. by default (which you definitely should not enable!) you're probably safe. If you do, well, it's sucky. I guess running a rootkit detection tool and monitoring your outgoing traffic for a while would be a good idea (and also a good food for paranoia - you'd discover how much outgoing traffic legit apps that you'd never expect talking to outside generate - version checks, usage updates, cloud syncs, etc.).
  • cpncrunch 13y ago
    It doesn't seem to be possible to make Flash use 'click to play' on chrome. You can make all plugins 'click to play' but unfortunately that breaks any plugins that do initialization in the onload handler. Java is now click-to-play by default, and I'm hoping that Flash goes that way soon. Flash is mostly just used for annoying adverts these days, so it won't be a great loss (and maybe that is why google is reluctant to disable it by default).
    • smsm42 13y ago
      It is definitely possible - my chrome does it. I have a number of extensions so I am not sure which one does it, but I'm sure it can be done.