Thread: Man in the Browser

see: http://www.csoonline.com/article/717...goes-universal

understanding "man in browser" attack succeed attacker need compromise victim's browser. covertly installing plug-in...

...these browser attacks may main reason i'm building me new big hammer can switch online activity linux

in windows have run "winpatrol" -- detect , stop these requests update browser... ugly

in linux browser, e.g. firefox -- running in "userland" -- , cannot updated without permission install software -- , apply "plug-ins" -- -- in windows -- uac not object ... think because such updates updates browser -- , not system

please forgive me if chew on many of type of question...

all applications run userland. updates handled centrally operating system have option choose ones or don't update. won't stop mitb attack though - make easier if you're late on patching.

attacker exploits firefox controls firefox - in browser @ point in virtually every way (without getting technical). best bet prevent attacks on browser using apparmor. apparmor confines firefox process capabilities, prevent many exploits working. stop files being written without explicit permission - way prevent attacker doing type of mitb attack won't able write new extensions/plugins if you've set right. there guide apparmor @ top of forum, sticky.

there's no need worry asking many questions.

Forum The Ubuntu Forum Community Ubuntu Specialised Support Security [ubuntu] Man in the Browser

Ubuntu