Hacker News new | ask | show | jobs
by yborg 3079 days ago
Google Project Zero-discovered flaw allows remote execution by malicious site if remote access in enabled in the client with no password set. This is not uncommon since people assume restricting to localhost will prevent access outside the host machine.