-
-
Re: TrendMicro Maximum Security 10 ti rende più vulnerabile☺Scritto da: ::1
> https://code.google.com/p/google-security-research...
> ${facepalm}
When you install TrendMicro Antivirus on Windows
Phew, pericolo scampato
!
`"la realta' non e' cosi' terrificante come vogliono farti credere" - Giambo ` - Wakko che cita Giambo
-
Re: TrendMicro Maximum Security 10 ti rende più vulnerabileScritto daNon Autenticatoil 2016-01-12 10:55:23.0 alle 2016-01-12 10:55:23.0Scritto da: ::1
> https://code.google.com/p/google-security-research...
> ${facepalm}
I spent a few minutes trying to understand how the SB shell worked, and then realized they were just hiding the global objects. I sent this annoyed follow up:
This thing is ridiculous, wtf is this:
https://localhost:49155/api/showSB?url=javascript:...
You were just hiding the global objects and invoking a browser shell...? ...and then calling it "Secure Browser"?!? The fact that you also run an old version with --disable-sandbox just adds insult to injury.
I don't even know what to say - how could you enable this thing *by default* on all your customer machines without getting an audit from a competent security consultant?
You need to come up with a plan for fixing this right now. Frankly, it also looks like you're exposing all the stored passwords to the internet, but let's worry about that screw up after you get the remote code execution under control.
Please confirm you understand this report.
Anche io voglio essere cosi' rude
-
Re: TrendMicro Maximum Security 10 ti rende più vulnerabileScritto daNon Autenticatoil 2016-01-12 11:13:34.0 alle 2016-01-12 11:13:34.0Scritto da: ::1
> https://code.google.com/p/google-security-research...
> ${facepalm}
Javascript... nodejs!!!...
-
Forum libero
Niente moderazione, niente censura. Registrazione non richiesta.Luca Annunziata recensirà Ubuntu 12.04 LTS ? Oppure faranno 2 righe senza manco una immagine?
-
Tutto il forum —
-
- Discussioni: Cronologia Nuove (Per utente) Ultime
- |
- Nuovo messaggio
- |
- Sondaggi
- |
- Inserisci fake ad
- Notizie: Cronologia Nuove (Per utente) Ultime
- |
- Nuova notizia
Mostra notizie nelle discussioni