4 ms·
Some more than others. But I'm pretty sure that the average consumer os is vulnerable to someone with the skills. Even if the os itself isn't, there will typica
by troels 13y ago
Some more than others. But I'm pretty sure that the average consumer os is vulnerable to someone with the skills. Even if the os itself isn't, there will typically be hundreds of unaudited programs running under escalated privileges. Any one of those would suffice.
- noinsight 13y agoI think that the situation is hopeless for joe users, if someone wants to own their computer they will. I wouldn't really even trust many IT admins to not get owned if someone actually targets them (instead of the normal random stuff everyone gets). Even if you know what you're doing, in the worst case you just need to browse to the wrong URL to get instantly owned without user interaction. I think it's hopeless for systems that are used in standard "desktop" manner, the attack surface is so large. See for example this: http://nakedsecurity.sophos.com/2013/11/03/fake-femme-fatale-dupes-it-guys-at-us-government-agency/ http://nakedsecurity.sophos.com/2013/11/03/fake-femme-fatale...
- ds9 13y ago"Even if you know what you're doing, in the worst case you just need to browse to the wrong URL to get instantly owned without user interaction" You'll have to make a better case. In the exploit in your link, the user was tricked by social engineering, had his computer configured to automatically run Java applets from arbitrary sources, and in all probability was running Microsoft Windows - hardly someone practicing good security.