Tag Info

New answers tagged

2

Obviously, this method is safer. Surely. Running a program within the browser's sandbox is always safer because the browser creates a contained environment for the third party program (Adobe Flash, in your case) -such as scratch space-to prevent the eventual malicious code from leaving the browser and installing itself to your hard drive. You can ...


1

To answer your question, there are a number of elements that I will try to discuss as briefly as possible in order to have a better grasp of the whole issue. Note that I exclude totally any Adobe Flash vulnerabilities that may be a threat to the user's privacy as it is not what you are asking about. Can I get hardware and operating system information with ...


0

A properly secured flash app (that is none of the common exploits) which is included in a web page you got from remote system is contained in a sandbox and has no access to the system except for some limited place where it can write and read its own data. It can also interact with script on the local page, make network connections to exchange data etc. If ...


0

If the user is authenticated and an attacker manages to use some kind of exploit to inject javascript (or flash) into the page, then yes, the attacker will be able to steal the secret token. They simply make a request using AJAX to the /auth endpoint and read the redirect URL that comes back. This was made possible recently by the addition of the responseURL ...


5

EMET software participates in a defence-in-depth approach of security. It adds an effective supplementary security layer when an attacker manages to successfully exploit a vulnerable software without being blocked by the anti-virus. However, in such domain is an endless race, since while EMET is getting more popular, attackers will try to craft their ...


0

EDIT: The OP has TOTALLY modified his question by reediting it AFTER I answered him, so my actual answer seems to be an answer to an other question. So please stop being chatty and take time to read the comments above before you add yours and restart the same conversation with me. was the Microsoft EMET effective in protecting user from Hacking team ...



Top 50 recent answers are included