I find the buffer overflow much more dangerous than the origin issue. We'd micropatch it - but first, do you think there are a pile of others there, which would make it pretty irrelevant?
-
-
-
Hmm, disagree, if they checked the Origin then only another local user could exploit the memory safety issues. If they don't check the origin but do check the JSON is well formed, then you can do things like send keystrokes to other applications

- 9 more replies
New conversation -
-
-
Hi Tavis, the release of Logitech Options 7.00, which addresses Origin checks and type checking, is now live and can be downloaded for Windows and Mac.
-
Does this suitably fix the problem?
@taviso
End of conversation
New conversation -
-
-
FWIW, I'm sure that most vendors don't want you to install their stuff too :) Nobody wants to get Tavisofied.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
There is a MacOS version of Options as well. I would assume it also has the vuln but I just uninstalled it to be safe.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Though I have never said it before to any Project Zero Team members -- Thank you all and i'm sure many out here also are appreciative of your efforts.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
IT'S A MOUSE. OR A KEYBOARD. It shouldn't need anything more than the built-in OS drivers/interfaces for basic functionality. And it sure as hell shouldn't need an ELECTRON APP. I'm too busy being mad at Logitech Options for existing in the first place to mock its bad security
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
"Craft WebSocket" = artisan WebSocket created by a hipster with a handlebar moustache? (very small batch)
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
I’ll never understand how these big corporation are so incompetent/lazy that this makes it into production. We had to build our own PKI on top of Let’s Encrypt for
@RainwayApp just to give unique and valid SSL certificates to our users for the WS server we run on their PC.Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.