News for hackers. Stuff that matters.

A comment on Google Safe Browsing can kill a startup. Parent comment

Re:Google Safe Browsing can kill a startup by lol768 on Saturday January 16, 2021 @12:17PM (#25803612)
> because we block uploads of executable files, it is _literally impossible for users to host malware on our servers_

How does this stop bad actors from exploiting bugs in e.g. V8 with malicious JavaScript?

[ Parent | on HN ]
Re:Google Safe Browsing can kill a startup by Blackthorn on Saturday January 16, 2021 @12:58PM (#25803920)
> How does this stop bad actors from exploiting bugs in e.g. V8 with malicious JavaScript?

You're correct: it doesn't. Blocking executable files aren't enough. Javascript files, zips containing executables, malicious Word files...all of these are vectors.

[ Parent | on HN ]
Re:Google Safe Browsing can kill a startup by ballenf on Saturday January 16, 2021 @01:08PM (#25803992)
Look at the file types gmail blocks from being directly attached to emails for a comprehensive list.
[ Parent | on HN ]