News for hackers. Stuff that matters.

A comment on Never run ldd on unknown executables. Parent comment

Re:Never run ldd on unknown executables by nextaccountic on Sunday July 23, 2023 @08:23PM (#36841500)
> Not even using a VM will keep you safe.

Do you browse the Internet? Ever visited an unknown website? Whatever the browser uses to run JS and wasm code on the web ought to be enough.

[ Parent | on HN ]
Re:Never run ldd on unknown executables by yjftsjthsd-h on Sunday July 23, 2023 @08:54PM (#36841713)
Browsers do in fact get exploited; I would have called that an example of it not being a solved problem.
[ Parent | on HN ]
Re:Never run ldd on unknown executables by nextaccountic on Sunday July 23, 2023 @09:03PM (#36841779)
They get exploited (and then the exploit is patched), but we're still using a browser to talk about this, right?
[ Parent | on HN ]
Re:Never run ldd on unknown executables by yjftsjthsd-h on Sunday July 23, 2023 @10:35PM (#36842481)
People used IE6; I wouldn't call that an endorsement of it as a secure system, only useful enough to justify the risk.
[ Parent | on HN ]
Re:Never run ldd on unknown executables by throwawaaarrgh on Monday July 24, 2023 @09:39AM (#36847812)
You're joking, right?

Browsers haven't ever been safe. There are competitions every year to find new 0days that break out of browser protections, and every year multiple are found. And those are the vulns they'll tell you about.

[ Parent | on HN ]