News for hackers. Stuff that matters.

A comment on All Major Browsers Fall at Pwn2Own Day Two. Parent comment

Re:All Major Browsers Fall at Pwn2Own Day Two by krylon on Saturday March 21, 2015 @06:10AM (#9242315)
As a sysadmin, I find these exploits deeply disturbing. It used to be that people actually needed to download a file and, like, execute/open it for their systems to become infected.

Recently, my users have been hit by fake DHL/UPS "track your shipment" mails, and some of them were sufficiently un-paranoid to click on the links provided by the mails, which apparently just showed a generic-looking 404-page.

Which might mean that the offending page had already been taken down. But on the other hand, with these exploits, that can already be enough to infect an unsuspecting visitor.

Well, one more reason to use Dillo, I guess.

[ Parent | on HN ]
Re:All Major Browsers Fall at Pwn2Own Day Two by makomk on Saturday March 21, 2015 @07:19AM (#9242429)
It's never been the case that people actually needed to download a file and open it to get infected. Actually, in some ways things have improved - it used to be a lot easier to find this kind of exploit, which is why there weren't rewards like this for finding one.
[ Parent | on HN ]