Cybersecurity researchers spotlight a new ransomware threat – be careful where you upload files

Comments

• Spendrill@lemm.ee ⁨6⁩ ⁨months⁩ ago

  The threat applies to Google’s Chrome and Microsoft’s Edge browsers but not Apple’s Safari or Mozilla’s Firefox

  Oh dear. How sad. Never mind.

  source
• sugar_in_your_tea@sh.itjust.works ⁨6⁩ ⁨months⁩ ago

  Looks like it’s just:

  1. Page prompts user for write access to directory
  2. User grants access
  3. …
  4. Shocked Pikachu when page overwrites files

  The proper fix here IMO is to not let the user grant write or read access to an entire directory, only the files the page needs. Ideally, the only way a page could get write access to a directory is if the page owns the directory (i.e. the browser creates it for them and the user copies files into it).

  source
• the_crotch@sh.itjust.works ⁨6⁩ ⁨months⁩ ago

  Users can send and receive email, listen to music or watch a movie within a browser with the click of a button.

  They could do that 20 years ago. Who wrote this garbage?

  source