News for hackers. Stuff that matters.

A comment on Proton.B: What this Mac malware does. Parent comment

Re:Proton.B: What this Mac malware does by hRrrm1 on Saturday May 13, 2017 @07:17PM (#14333472)
"scan everything before opening" is not always desirable as it exposes a large attack surface:

https://bugs.chromium.org/p/project-zero/issues/detail?id=12...

[ Parent | on HN ]
Re:Proton.B: What this Mac malware does by AlexCoventry on Sunday May 14, 2017 @12:25AM (#14334214)
"Avoid running your scan with elevated privileges" could have greatly mitigated this failure.

> NScript is the component of mpengine that evaluates any filesystem or network activity that looks like JavaScript. To be clear, this is an unsandboxed and highly privileged JavaScript interpreter that is used to evaluate untrusted code, by default on all modern Windows systems. This is as surprising as it sounds.

[ Parent | on HN ]