![]() ![]() This is why we continue to hear about hacks and data breaches all the time, yet very rarely observe anything super nasty like backdoors and the like these days on most consumer devices (usually the worst thing I see is ransomware, which typically gets in through an exploit, typically from a malicious ad ironically enough (and the ad is likely to be blocked by one or more of the aforementioned extensions of course, rendering the exploit harmless to those who use such blocking tools) or malicious email attachment). On the other hand, targeted attackers going after high value targets (such as businesses, websites/servers, government and infrastructural targets etc.) would not target such a plugin/extension because such extensions are not often used in such environments and there are much easier ways into a system (remember, those extensions are sandboxed and the browser runs in a limited user mode with no admin privileges by default) to achieve full access/control over it. ransomware, tech support scams etc.) or scamming money (phishing scams, bogus products etc.) in order to gain the most profits. Ublock Origin just started blocking me from. The bad guys typically target the largest groups/most commonly used applications so that they can infect as many as possible when the objective is extortion (i.e. All of a sudden, for the past 3 days, ublock is failing to block ads on youtube and many sites. Is it possible? Certainly, but not very likely. That would be like the bad guys trying to use your AV to infect you. I do not see any issues or performance impact using these together, all fully enabled.Īs for attack surface, I'm not too worried about a blocking browser extension being leveraged in an attack, both because extensions are sandboxed within the browser (a security measure implemented in modern browsers), and because it wouldn't make much sense for attackers to target the kinds of extensions used by those who actually know the risks of online threats and ads and use such tools to enhance their safety/browsing. I'm currently using Malwarebytes Browser Guard, uBlock Origin, Ghostery, Disconnect, DuckDuckGo Privacy Essentials, HTTPS Everywhere, Nano Defender and uBlock Origin Extra in addition to Web Protection in Malwarebytes Premium and a massive HOSTS file currently containing almost 1 million entries and counting.
0 Comments
Leave a Reply. |