An iframe from googlesyndication.com tries to access the camera and microphone

Re:An iframe from googlesyndication.com tries to access the ... by boomlinde on Sunday December 19, 2021 @08:46PM (#29620699)

Doesn't seem like a great example since the image itself is perfectly safe. The exploit still needs JavaScript to extract and execute the payload embedded in the image, and then relied on Flash to install malware. Without JavaScript it's just an image like any other.

The NSO group iMessage exploit is a more interesting example, essentially turning a poorly bounded JBIG2 decompressor into a virtual machine.

[ Parent | on HN ]

Re:An iframe from googlesyndication.com tries to access the ... by VRay on Monday December 20, 2021 @02:17AM (#29622242)

haha, if a country wants to spend a 9 figure sum or someone comes back in time from the future to hack me, I'll be happy to consider myself pwned

It's a huge bummer that I HAVE TO block all ads as a security measure, though, and that people accept "Download advertisement.exe and run it in a half-assed sandbox or you're stealing that clickbait article" as the way things should be

[ Parent | on HN ]

Re:An iframe from googlesyndication.com tries to access the ... by boomlinde on Monday December 20, 2021 @07:05PM (#29632144)

> if a country wants to spend a 9 figure sum

After the initial investment in developing the exploit and before the vulnerability was patched, there would have been a near zero cost to hack any one user in particular.

[ Parent | on HN ]