How can defense know that exploit didn't change data or create oppty for other attackers to change data? @csoghoian @dguido
-
1st important point is they're proving website access which is separate from device data, eg. you are user 'x'
2nd is that exploit gains control of execution, payload executes new instructions. payload available to review
-
-
3rd that the NIT is memory-resident callback-type payload. There are no new introduced weaknesses, period.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.