How To Impress Girls With Browser Memory Protection Bypasses

Windows Vista security 'rendered useless' by researchers

SearchSecurity.com

How To Impress Girls With Browser Memory Protection Bypasses

I chose the original title since it's not so sensationalist. No specifics are given, and if SRP will block this (probably).

 

im gonna read it later and see what i think.

 

How are you sure?
Have you read details?
(i'm just forwarding this, i'm not bashing Vista!)

 

Nice title, Pedro, indeed. Unfortunately I'm married - so no girls around .... And my wife is an engineer and very hard to impress.

Seriously: Yes, we'll have to wait for the details. On the hand, your quote and the following one from http://searchsecurity.techtarget.com/news/article/0,289142,sid14_gci1324395,00.html :

suggest that browsers other than IE will probably not be affected. Firefox and Opera don't know anything about ActiveX, and Javascript is not Jscript.

 

You have to mention BlackHat!

 

Vista 64-bit, LUA, SRP, w/DFT and AR, Opera, Proxomitron, I'm not worried.

 

Java + ActiveX... new vulnerabilities have stopped being a surprize a loooong time ago...

Anyways, haven't read it yet, but I don't think girls will be impressed by this... I think my girlfriend will not even care about it

 

when talking to girls i avoid talking about computers

 

Thank you for the links Pedro!

The paper itself, 'Bypassing Browser Memory Protections: Setting Back Browser Security by 10 Years' can be found here.

From the first link in the first post:

 

Thank you for finding that MrBrian.

 

You're welcome .

 

Firefox + NoScript

 

Article from Arstechnica:

The sky isn't falling: a look at a new Vista security bypass

 

Security is merely setting the bar higher, hopefully so high as to not be worth the effort to hurdle.