[ale] nailing down firefox security and privacy - PT 1

Pat Regan thehead at patshead.com
Thu Oct 13 15:58:12 EDT 2011


On Thu, 13 Oct 2011 10:16:15 -0400
David Tomaschik <david at systemoverlord.com> wrote:

> I'd planned to stay out of this one -- as much as I like a good
> debate, I've been busy lately, but I can't leave this part alone.
> There have been a sufficient number of remote code execution
> vulnerabilities that you can't say "Programs don't just auto-download
> and open on the client system, even on something as insecure as
> Windows."

If the malware in question here were using an exploit, why would it
bother trying to get the user to click on it?

Pat


More information about the Ale mailing list