Re:Mozilla patches Firefox zero-day abused in the wild
by saidajigumi on Wednesday June 19, 2019 @12:08PM
(#20224561)
if an attacker is porting the attack to Macs (presumably a lot of work)
It's worth noting that a professional security and pentest company I know of had a Python-based exploit authoring DSL that automatically generated exploit code across a very wide range of processor architectures and OSes. This was about fifteen years ago.
Re:Mozilla patches Firefox zero-day abused in the wild
by stcredzero on Wednesday June 19, 2019 @12:41PM
(#20224859)
It's worth noting that a professional security and pentest company I know of had a Python-based exploit authoring DSL that automatically generated exploit code across a very wide range of processor architectures and OSes.
Makes sense. If entire OSes can be written in an intermediate representation, then exploits can be as well.
Re:Mozilla patches Firefox zero-day abused in the wild
by kseifried on Thursday June 20, 2019 @12:07AM
(#20229777)
You mean Core Impact? =).
Re:Mozilla patches Firefox zero-day abused in the wild
by saidajigumi on Thursday June 20, 2019 @06:42PM
(#20238125)
dingdingdingdingding!
Re:Mozilla patches Firefox zero-day abused in the wild
by kchr on Wednesday June 19, 2019 @10:20AM
(#20223586)
Just speculation, but "targeting" in this case may be as trivial as checking the user agent header, or other "device recognition" tricks common in web development nowadays. I am sure there are hundreds of libraries that do this for you...
Re:Mozilla patches Firefox zero-day abused in the wild
by admax88q on Wednesday June 19, 2019 @06:51AM
(#20222232)
What about that makes it sound targeted? Seems like standard vulnerabilities chained together, nothing specific to the "target"
Your friend should probably be browsing as a non-admin in a continuously-reimaged VM, separate from an air-gapped machine, if you have those kinds of attackers after you. Spooky..