Re:Zero-click, wormable, cross-platform remote code executio...
by bjarneh on Wednesday December 09, 2020 @06:59AM
(#25357705)
Yes that should be possible. Unfortunately I was in the opposite position, i.e. I had to make this browser look normal by hiding all of its misbehaviors, not try to exploit them :-)
[ Parent
| on HN ]
Re:Zero-click, wormable, cross-platform remote code executio...
by tinus_hn on Wednesday December 09, 2020 @09:10AM
(#25358588)
Yes but if you can find a way to exploit it you can file it as a security issue and get Microsoft to fix it or even pay you!
Re:Zero-click, wormable, cross-platform remote code executio...
by bjarneh on Thursday December 10, 2020 @07:39AM
(#25373046)
Ah, that's the loophole in Microsoft's bug-reporting. It's not just hard to file bug-reports, you have to find ways to exploit every bug in a way that make them security issues :-)
> and get Microsoft to fix it or even pay you!
That would be nice...