Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Hackers used zerodays to infect Windows, iOS, and Android users

arstechnica.com

Post reply on HN
Print view View original

151–156 of 156 posts

Re: Hackers used zerodays to infect Windows, iOS, and Android users

#151

Post by generalizations »

xet7 wrote: post #132
generalizations wrote: post #98

Earlier quoted context omitted.

I would do that also, if I could replace the live traffic of google maps. Did you find a solution to that, or do you just not need it?

a) Some do like paper maps. b) Google Maps could advice direction to some smaller not so well maintained roads, that could increase travel time a lot, or lead to some road where it's hard to turn back. So maybe planning ahead and writing driving instructions at home before driving would be better. Or just trying to follow main street signs for major roads. c) There are some DIY projects like Raspberry Pi navigator: h…

Oh, I was thinking specifically about avoiding traffic jams as they happen, which requires some kind of online connection.

The raspberry pi project looks interesting, though.

Re: Hackers used zerodays to infect Windows, iOS, and Android users

#152

Post by dave_sullivan »

saagarjha wrote: post #147
dave_sullivan wrote: post #27

Been playing with tools like angr lately and learning more about binary analysis. It seems to me that "automatic exploit generation" is improving quite a bit where the infrastructure for analysis is a little tricky to set up, but then you can direct that infrastructure to analyze the code for you. The bad guys and good guys are in a race to find new exploits faster (they always have been) but I've been pretty amazed…

angr is cool and all (disclaimer: I know many of the people who work on it) but we’re not really at a point where you can just point automated tooling at software and get results. That isn’t to say that code analysis tools are not heavily used by people finding exploits, but their effectiveness is limited by the difficulties of analyzing code and the fact that the “good guys” have access to pretty much the same tooli…

> we’re not really at a point where you can just point automated tooling at software and get results

I hear you, but I see where they're going with it and what is possible with automation will improve each year. It's certainly not a dead end.

Re: Hackers used zerodays to infect Windows, iOS, and Android users

#153

Post by edoceo »

edoceo wrote: post #119
zzo38computer wrote: post #101

Earlier quoted context omitted.

I agree, and on my computer I disable custom fonts in the web browser anyways. A better web browser is really needed; one of things it can have is support for the Gemini protocol and file format. (It can also omit many things, as well as adding things.)

What else to omit? Not snark. I'm playing with a Firefox fork and ripping stuff out (pocket).

Found this too: https://gitlab.com/librewolf-community/browser/linux

Re: Hackers used zerodays to infect Windows, iOS, and Android users

#154

Post by fsflover »

uncledave wrote: post #106
fsflover wrote: post #91

Earlier quoted context omitted.

The better way is to use Qubes OS for security through isolation. You then use hardware virtualization to isolate untrusted application (including browsers) from the rest of system. Doesn't work on mobile though.

Processes were a form of robust virtualisation once. It’s just pushing the problem down another layer. There are vulnerabilities in virtualisation layers too.

> There are vulnerabilities in virtualisation layers too.

Qubes OS v4+ does not use typical software virtualization methods. VT-d hardware virtualization it uses was broken only once, and it was done by the Qubes founder: https://en.wikipedia.org/wiki/Blue_Pill_(software)

Re: Hackers used zerodays to infect Windows, iOS, and Android users

#155

Post by LinuxBender »

generalizations wrote: post #98
LinuxBender wrote: post #75

Earlier quoted context omitted.

I have a $12 flip phone, pay as you go, not in my name. It can't browse the web and if someone sends me binary data in a text message its shows up the same as if I read binary data in my terminal. The phone has no idea what to do with it. Battery life would be great if the did not remove the cell sites near me. I think this model was replaced by one that is $29 but its basically the same thing. Check Walmart or an eq…

I would do that also, if I could replace the live traffic of google maps. Did you find a solution to that, or do you just not need it?

I do not need it.
Post reply on HN