3 ms·
I was listening to the Security Now podcast this morning. On episode 514, Tor's Astoria Client about the first 30 minutes of the podcast is spent going into ext
by ruraljuror 11y ago
I was listening to the Security Now podcast this morning. On episode 514, Tor's Astoria Client about the first 30 minutes of the podcast is spent going into extreme detail about how a recent Flash vulnerability was exploited.
I can't link to a page for the episode.
Here is the episode list:
https://www.grc.com/securitynow.htm https://www.grc.com/securitynow.htm
The episode:
https://media.grc.com/sn/sn-514.mp3 https://media.grc.com/sn/sn-514.mp3
The transcript:
https://www.grc.com/sn/sn-514.txt https://www.grc.com/sn/sn-514.txt
I think most of the content is sourced (and credited) to this post from FireEye:
https://www.fireeye.com/blog/threat-research/2015/06/operation-clandestine-wolf-adobe-flash-zero-day.html https://www.fireeye.com/blog/threat-research/2015/06/operati...
- bendmorris 11y agoThanks for sharing, this is fascinating. Given the level of sophistication in this attack, I wonder to what extent the number of vulnerabilities found in Flash is a function of the effort spent disassembling it and searching for them specifically. Since browsers implement their own language runtimes, might they be vulnerable to the same types of attacks? Is there anything that makes Firefox inherently more secure than Flash?