• 1 Post
  • 12 Comments
Joined 11 个月前
Cake day: 2024年11月16日
  • incompetent@programming.devtoMildly Infuriating@lemmy.world•Microsoft doing shady Microsoft stuff againEnglish
    61·
    4 天前

    Your AI generated summary, again, lacks evidence. I asked for a site, or a source where what you claim credibly happened, not just repeating the same myths in a circular series of arguments.

    I used no AI. Had you actually paid attention you’d see that I cited my source in the first link. The summary I posted it a direct quote from that source. Just because you don’t like what you read that doesn’t automatically make it AI slop.

    I don’t feel like refuting any of your other, unsourced assumptions. Good luck with your beloved Windows 7.

  • incompetent@programming.devtoMildly Infuriating@lemmy.world•Microsoft doing shady Microsoft stuff againEnglish
    10·
    4 天前

    It’s called a Drive-by Compromise:

    Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. Multiple ways of delivering exploit code to a browser exist (i.e., Drive-by Target), including:

    • A legitimate website is compromised, allowing adversaries to inject malicious code

    • Script files served to a legitimate website from a publicly writeable cloud storage bucket are modified by an adversary

    • Malicious ads are paid for and served through legitimate ad providers (i.e., Malvertising)

    • Built-in web application interfaces that allow user-controllable content are leveraged for the insertion of malicious scripts or iFrames (e.g., cross-site scripting)

    Browser push notifications may also be abused by adversaries and leveraged for malicious code injection via User Execution. By clicking “allow” on browser push notifications, users may be granting a website permission to run JavaScript code on their browser.

    It’s not Hollywood fantasy, as you claim. It is a well documented attack vector.