News for hackers. Stuff that matters.

A comment on Linux Problems on the Desktop (2018). Parent comment

Re:Linux Problems on the Desktop (2018) by yjftsjthsd-h on Sunday February 24, 2019 @11:08PM (#19242829)
> And when you have a setup with Wireshark that works why update it? I am dubious that Wireshark can be an attack vector so security updates won’t be useful.

Ignoring feature enhancements and bug fixes for a moment, do you really think it improbable that there are security issues in a piece of software whose entire job is to sit on the network and record everything that it sees and then translate and interpret it?

[ Parent | on HN ]
Re:Linux Problems on the Desktop (2018) by hartator on Sunday February 24, 2019 @11:42PM (#19242995)
If an evil app is already communicating on the web and is already on your computer, what can it gain more?
[ Parent | on HN ]
Re:Linux Problems on the Desktop (2018) by crummy on Monday February 25, 2019 @01:14AM (#19243442)
Because the "evil app" is just a specially crafted JPG that your browser opened up that triggers some edge case in the old unpatched version of Wireshark that is inspecting traffic.
[ Parent | on HN ]
Re:Linux Problems on the Desktop (2018) by yjftsjthsd-h on Monday February 25, 2019 @01:01AM (#19243371)
Wireshark (usually) runs in promiscuous mode; it'd be "an evil app is already able to send something visible from your network interface" - which to be fair, might help for internal uses. It does usually mean that anything on your local network can attack you.
[ Parent | on HN ]