Hacker News new | past | comments | ask | show | jobs | submit login

Did they only fix the type confusion or did they do something about the unsandboxed JavaScript interpreter running as SYSTEM ?



They got this out incredibly quickly so it's likely that either they just fixed the type confusion or that they already had a sandboxing modification ready which they were saving for a major update but had to rush out. I don't know the age of the defender code, but my money is on the former.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: