TrendMicro Node.js HTTP server listening on localhost can execute commands

Re:TrendMicro Node.js HTTP server listening on localhost can... by SignMeTheHELLUp on Monday January 11, 2016 @03:26PM (#10883195)

Just another reminder that antivirus is dead. Any antivirus can be trivially circumvented. Based on the level of incompetence of multiple antivirus developers over the past few years, and my own experience with antivirus slowing down and heating up my machine, antiviruses themselves are more trojans than anything.

[ Parent | on HN ]

Re:TrendMicro Node.js HTTP server listening on localhost can... by jrcii on Monday January 11, 2016 @03:53PM (#10883416)

GPO with AppLocker (app whitelisting) seems to be a good solution for Windows, kind of a pain to setup though.

[ Parent | on HN ]

Re:TrendMicro Node.js HTTP server listening on localhost can... by JoshTriplett on Monday January 11, 2016 @08:15PM (#10884898)

While that seems like a somewhat sensible approach for non-technical end users (modulo various kinds of runnable scripts), a whitelisting approach can't possibly work in an organization doing software development.

I can't think of any technological approach that would work in such an organization, short of completely redesigning end-user client systems.

[ Parent | on HN ]

Re:TrendMicro Node.js HTTP server listening on localhost can... by kevincox on Monday January 11, 2016 @05:27PM (#10884081)

If I was to use antivirus it would have to be whitelisting. Everything else is a toy in my opinion.

[ Parent | on HN ]