News for hackers. Stuff that matters.

A comment on TrendMicro Node.js HTTP server listening on localhost can execute commands. Parent comment

Re:TrendMicro Node.js HTTP server listening on localhost can... by sarciszewski on Monday January 11, 2016 @04:11PM (#10883592)
Let me back this comment up with some reading material and useful resources:

http://decentsecurity.com/about/ (This entire website)

https://www.microsoft.com/emet (for Windows)

https://paragonie.com/blog/2015/06/guide-securing-your-busin... (basic web security advice for non-technical people)

You don't need AntiVirus.

[ Parent | on HN ]
Re:TrendMicro Node.js HTTP server listening on localhost can... by ucho on Tuesday January 12, 2016 @04:24AM (#10886348)
I it is not that we don't need it but it is finally obvious that there is no reliable way to detect harmful software. All we are left with is putting each and every application in sandbox, unable to interact with any other software or user data. It is just very hard to make that user friendly and acceptable for average Joe.
[ Parent | on HN ]