Reply to thread

Message

<blockquote data-quote="wat0114" data-source="post: 937455" data-attributes="member: 91306">Thanks for the link, Andy. I guess the most important bit I took&nbsp; from the article was: &quot;Remote DLL preloading attacks occur when a program sets its current directory to a remote location such as a Web share before loading a DLL&quot;. I suppose this would be more of an enterprise-type attack.I think drive-bys are probably very difficult to successfully pull off on the home user if the software is kept up to date, especially browsers, plugins kept to bare necessary only, and they are running AV and smartscreen filtering. Add in a good ad blocker, especially one that will actually block 3rd-party scripts and iframes, and you&#039;re closer to bulletproof. All else such as SRP, OS hardening techniques, HIPS is all icing on the cake and maybe even overkill depending on the implementation.In linux Debian dual-booted with Windows 10 Pro I have all network-listening services, my web browsers and email client confined with quite strict Apparmor policies. Probably overkill but it was fun to set up and just as much fun to maintain.[ATTACH]256451[/ATTACH]</blockquote>

[QUOTE="wat0114, post: 937455, member: 91306"] Thanks for the link, Andy. I guess the most important bit I took from the article was: "Remote DLL preloading attacks occur when a program sets its current directory to a remote location such as a Web share before loading a DLL". I suppose this would be more of an enterprise-type attack. I think drive-bys are probably very difficult to successfully pull off on the home user if the software is kept up to date, especially browsers, plugins kept to bare necessary only, and they are running AV and smartscreen filtering. Add in a good ad blocker, especially one that will actually block 3rd-party scripts and iframes, and you're closer to bulletproof. All else such as SRP, OS hardening techniques, HIPS is all icing on the cake and maybe even overkill depending on the implementation. In linux Debian dual-booted with Windows 10 Pro I have all network-listening services, my web browsers and email client confined with quite strict Apparmor policies. Probably overkill but it was fun to set up and just as much fun to maintain.[ATTACH]256451[/ATTACH] [/QUOTE]

Verification