Reply to thread

Message

<blockquote data-quote="509322" data-source="post: 760581">1. Weaponized documents, scripts, malicious .exe... downloaded as email attachments or from unknown\untrusted sources.2. Macros can, for example, call WMI and have it launch PowerShell or other interpreters in an unusal way.3. They&#039;re just not finding the exploits. It&#039;s got nothing to do with AppContainer. I see people keep mentioning AppCotainers and browser sandboxes and such. While all of them add a layer of defense (equivalent to a speed bump here in the real world), they have been shown to be defeatable (just as everyone can get over a speed bump in the road). The best deterrent is not to use Adobe products. Anti-exploits aren&#039;t worth all the associated problems and annoyances - which I know you are already aware they&#039;re a real pain.And don&#039;t gage things by the rate of exploit reports in the IT security news as it is a terrible indicator of what is actually happening in user-land.</blockquote>

[QUOTE="509322, post: 760581"] 1. Weaponized documents, scripts, malicious .exe... downloaded as email attachments or from unknown\untrusted sources. 2. Macros can, for example, call WMI and have it launch PowerShell or other interpreters in an unusal way. 3. They're just not finding the exploits. It's got nothing to do with AppContainer. I see people keep mentioning AppCotainers and browser sandboxes and such. While all of them add a layer of defense (equivalent to a speed bump here in the real world), they have been shown to be defeatable (just as everyone can get over a speed bump in the road). The best deterrent is not to use Adobe products. Anti-exploits aren't worth all the associated problems and annoyances - which I know you are already aware they're a real pain. And don't gage things by the rate of exploit reports in the IT security news as it is a terrible indicator of what is actually happening in user-land. [/QUOTE]

Verification