Re:U.S. to give ransomware hacks similar priority as terrori...
by jtsiskin on Thursday June 03, 2021 @09:02PM
(#27389307)
Yes, but then you read things like https://googleprojectzero.blogspot.com/2021/01/introducing-i..., or look at the payments offered by https://zerodium.com/program.html… the days of clicking a link -> persistence payload with escalated privileges are still here
Re:U.S. to give ransomware hacks similar priority as terrori...
by SilverRed on Thursday June 03, 2021 @09:26PM
(#27389448)
From what I see on that page. It costs $500,000 to exploit chrome and your attack only lasts for a few days and then google pushes out a fix to all chrome users. This is so much better than the IE era where a teenager with some free time and skill could make something up and there would still be exploitable machines years later for the same bug.
Re:U.S. to give ransomware hacks similar priority as terrori...
by beermonster on Friday June 04, 2021 @01:47AM
(#27390979)
And yet have you seen how many zero day, patch now, actively explored in wild vulnerabilities there have been in Chrome just this year?
It doesn’t feel like even Google are winning
Things are actually getting better in some ways. Modern OSs with automatic updates are more secure than OSs have ever been. The days where clicking a link on an email or plugging in a USB could infect your computer are almost gone outside of rare zerodays which get patched for everyone pretty quick.
Things are getting even better with hypervisors, SELinux and secure languages rolling in. Significant portions of Android and in the future linux, will and are being rewritten in rust which wipes out entire classes of the worst bugs we are being faced with.
The problem is that the attackers are also getting more sophisticated and the targets are becoming more valuable with more and more getting put online.