News for hackers. Stuff that matters.
Re:MS Security Advisory 4022344: RCE in Windows Defender by Analemma_ on Monday May 08, 2017 @09:27PM (#14297056)
It sounds a bit counterintuitive, but for me this just confirms that you should only be running Microsoft's AV software and avoiding all that third-party crap like the plague. This bug was more subtle than the ones Tavis has found in the third-party products, and Microsoft responded immediately with a fix instead of giving them the runaround.
[ Parent | on HN ]
Re:MS Security Advisory 4022344: RCE in Windows Defender by modeless on Monday May 08, 2017 @09:25PM (#14297046)
"To be clear, this is an unsandboxed and highly privileged JavaScript interpreter that is used to evaluate untrusted code, by default on all modern Windows systems. This is as surprising as it sounds."

https://bugs.chromium.org/p/project-zero/issues/detail?id=12...

[ Parent | on HN ]
Re:MS Security Advisory 4022344: RCE in Windows Defender by Clownshoesms on Monday May 08, 2017 @10:29PM (#14297330)
Why on earth?? I don't get why the engine would be executing JavaScript, even if it were sandboxed, in the first place? That doesn't sound sensible.
[ Parent | on HN ]
Re:MS Security Advisory 4022344: RCE in Windows Defender by rdl on Monday May 08, 2017 @09:01PM (#14296943)
This was the vulnerability found by Tavis and Natashenka from P0: https://twitter.com/taviso/status/860679110728622080

Impressive that Microsoft patched within 3 days.

[ Parent | on HN ]
Re:MS Security Advisory 4022344: RCE in Windows Defender by jvehent on Monday May 08, 2017 @09:39PM (#14297116)
It always depends on the vulnerability, but most major organizations are able to patch critical issues in less than 24 hours. That's the result of improving continuous integration and release engineering pipelines to the extreme.

The real issue is getting 100% of users to download and apply the patches. We haven't solved that one yet.

[ Parent | on HN ]