Plugins - yes, they're handy but they also increase the surface of attack

  • 9 March 2016
  • 4 replies
  • 241 views

Userlevel 7
Badge +54
Yasin Soliman | March 9, 2016
 
                                                


 

Any plugin could potentially put your computer - and your data - at risk

 
If you're reading this on a computer, it's pretty likely that you have at least one of these plugins installed: Adobe Flash, Oracle Java or Microsoft Silverlight.
 
You may have downloaded Flash to play a game or Silverlight to watch a live football match, inside of your web browser. Starting to sound familiar?
 
Whichever web browser you are using, you should know that using any plugin runs the risk of putting your system - and your data - in increased peril.
 
Let's travel back in time for a quick history lesson.
 
Full Article

4 replies

Userlevel 7
My question is without these plugins how does one function or operate efficiently on the web???  It would seem to me it would be a constant battle to patch these plugins on a constant basis to avoid exploits.
Userlevel 7
Badge +54
@Antus67 wrote:
My question is without these plugins how does one function or operate efficiently on the web???  It would seem to me it would be a constant battle to patch these plugins on a constant basis to avoid exploits.
It needs a system where the plugins are checked and updated automatically when necessary.
Userlevel 7
@ wrote:
@Antus67 wrote:
My question is without these plugins how does one function or operate efficiently on the web???  It would seem to me it would be a constant battle to patch these plugins on a constant basis to avoid exploits.
It needs a system where the plugins are checked and updated automatically when necessary.
Agreed, Jasper...but just who is going to spend the time and/or effort to 'close the gap'? :(
Userlevel 7
Badge +54
@ wrote:
@ wrote:
@Antus67 wrote:
My question is without these plugins how does one function or operate efficiently on the web???  It would seem to me it would be a constant battle to patch these plugins on a constant basis to avoid exploits.
It needs a system where the plugins are checked and updated automatically when necessary.
Agreed, Jasper...but just who is going to spend the time and/or effort to 'close the gap'? :(
Some of the reputable ones such as Webroot update automatically the problem is though, there is also a lot of less reputable ones.

Reply