15 min listen
Casting Firefox to your TV, Roku or Game Console? Watch out for this major DANGEROUS bug!
Casting Firefox to your TV, Roku or Game Console? Watch out for this major DANGEROUS bug!
ratings:
Length:
11 minutes
Released:
Sep 22, 2020
Format:
Podcast episode
Description
What scared me about this bug is how EASY it is to execute, no MITM, no special software.. its all exploiting of existing software.. Let us discuss The SSDP engine in Firefox for Android (68.11.0 and below) can be tricked into triggering Android intent URIs with zero user interaction. This attack can be leveraged by attackers on the same WiFi network and manifests as applications on the target device suddenly launching, without the users' permission, and conducting activities allowed by the intent. Resources https://en.wikipedia.org/wiki/Simple_Service_Discovery_Protocol https://gitlab.com/gitlab-com/gl-security/security-operations/gl-redteam/red-team-tech-notes/-/tree/master/firefox-android-2020 https://twitter.com/init_string https://twitter.com/LukasStefanko/status/1307013106615418883
Released:
Sep 22, 2020
Format:
Podcast episode
Titles in the series (100)
Episode 10 - Scalable Software by The Backend Engineering Show with Hussein Nasser