He can not send a browser plugin, nor can he send desktop software. The only (da... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

marcosdumay on June 17, 2014 | parent | context | favorite | on: JavaScript Cryptography Considered Harmful

He can not send a browser plugin, nor can he send desktop software.

The only (dangerous) thing an attacker can send on this case is Javascript.

kachnuv_ocasek on June 17, 2014 [–]

Of course he can send you executable content right away. He can also send you to a page and instruct you to download something.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact