On Thu, 2018-01-04 at 17:58 -0600, Michael Cronenworth wrote:
On 01/04/2018 05:32 PM, Patrick O'Callaghan wrote:
> Browsing a malicious website that runs Javascript can be a problem.
> Site isolation is a mitigation technique that provides partial
> protection. Hints for Chrome can be found at:
>
>
https://support.google.com/faqs/answer/7622138
>
> Presumably similar techniques can be applied to Firefox.
Yes, but his question was "can someone attack me remotely?"
He would have to navigate to a malicious website for the vulnerability to affect
him. A local action.
Certainly, but the attack is nonetheless remote, since it's coming from
a non-local adversary. I think it's better to be clear rather than
ambiguous.
poc