News for hackers. Stuff that matters.

A comment on TrendMicro Node.js HTTP server listening on localhost can execute commands. Parent comment

Re:TrendMicro Node.js HTTP server listening on localhost can... by jrcii on Monday January 11, 2016 @03:53PM (#10883416)
GPO with AppLocker (app whitelisting) seems to be a good solution for Windows, kind of a pain to setup though.
[ Parent | on HN ]
Re:TrendMicro Node.js HTTP server listening on localhost can... by JoshTriplett on Monday January 11, 2016 @08:15PM (#10884898)
While that seems like a somewhat sensible approach for non-technical end users (modulo various kinds of runnable scripts), a whitelisting approach can't possibly work in an organization doing software development.

I can't think of any technological approach that would work in such an organization, short of completely redesigning end-user client systems.

[ Parent | on HN ]
Re:TrendMicro Node.js HTTP server listening on localhost can... by kevincox on Monday January 11, 2016 @05:27PM (#10884081)
If I was to use antivirus it would have to be whitelisting. Everything else is a toy in my opinion.
[ Parent | on HN ]