Hacker News Reader

I wonder how long this will remain compiled into the official versions of Firefox and Chrome after it starts being used by malware.

Also if anyone has used this to document everything Chrome sends back to the mother ship with its pinned certs.

And finally if it will be possible to implement something similar for IE and the rest of Windows (spyware/analytics) with Alex Ionescou's soon-to-be-released kernel driver interception framework.

View on HN

If malware can set arbitrary environment variables, it can also typically analyze and/or modify browser memory.

How so? It would seem like a minor configuration change would be unrelated to accessing a process's memory. But I'm not a security guy.

I was looking at an anti-malware endpoint security product today. I have to use it, but I'm seriously dubious as to how useful it's going to be. Saw this article.

Hey, hey, what do you know. First try with wireshark and I'm reading the ssl from the protected computer.

Reply on news.ycombinator.com