Gdetrailer wrote:
bwanshoom wrote:
Gdetrailer wrote:
Think of JavaScripts as very tiny programs that have complete and full administrator access rights to your PC.
This is 100% incorrect. Javascript runs in the context of the browser and browsers have a lot of security surrounding their execution. While it's true that sometimes holes can be found in this protection, the way you tell it there's no protection at all.
And to avoid any program from having "full admistrative access rights to your PC" the best advice is to not use an administrative account for your day to day activities, especially if it involves the web.
NOPE, sorry JavaScripts do not behave totally within the browser.
JavaScripts ARE the main mechanism used to deliver MALWARE and that malware CAN contain very harmful payloads like virus, keyloggers, ransomware, adware and so on.
The Javascripts work silently in the background AND HAVE COMPLETE AND FULL CONTROL OF YOUR PC. JavaScripts can and are able to download and install REMOTE programs, change your registry and even lock you out of your own PC.
I HAVE WATCHED this happen on my own PC once before I wised up and quit fully relying on Antivirus software. I took action by installing FireFox with AdBlockPlus along with NoScript. Doing those steps will not make your PC "bullet proof" but they do return some control back to you the PC user by choking down the full unrestricted access of JavaScript.
Every web page you visit whether you feel it is safe or not use the scripting of JavaScripts and there is huge security hole with JavaScripts.
This is not completely accurate. Yes, Javascript runs with system privileges. Which is compelling reason not to connect to the NET using a default Admin user account. Something Windows users have never understood, and could prevent as much as 90% of malware exploits as indicated by a security report release last year. Using an Admin account makes it that much easier for hackers.
If Javascript was allowed to have system admin privileges by default in a browser environment, all browsers would ban its use completely. Instead, browser basically sandbox Javascript, allowing only limited system access.
The reason Javascript can do so much damage is that it typically takes advantage of a vulnerability, in the browser, plug-ins or extensions, or in the OS, to bypass the sandbox restrictions to gain system access. This is a another reason to keep browsers, plug-ins, and your OS updated with all security patches.
