News for hackers. Stuff that matters.

A comment on Mozilla patches two use-after-free vulnerabilities (ab)used in the wild. Parent comment

Re:Mozilla patches two use-after-free vulnerabilities (ab)us... by concinds on Sunday March 06, 2022 @11:58PM (#30584375)
> The same reasons might apply: Firefox too has a smaller market share and more discerning user base, so less attractive to target at least for mass malware.

Firefox is Tor Browser which is the most attractive target by far for 0 days. 0 days are often not targeted to a single individual anymore but are commonly used "in the wild" against mass targets, e.g. everyone who browses a political dissident website.

[ Parent | on HN ]
Re:Mozilla patches two use-after-free vulnerabilities (ab)us... by fulafel on Monday March 07, 2022 @02:08AM (#30584987)
This sounds like a plausible factor but on the other hand, people who use Tor might be more security conscious and/or tech savvy, frequently run in a sandbox VM - and those unpatched vulnerabilities might get burned sooner if used on them. Any evidence or data would be interesting to see of course.
[ Parent | on HN ]