![]() He or she can rule your machine, and macOS's "UNIX security" will only help the attacker by honoring root permissions. When an attacker gets root, it's Game Over. This does NOT make you safe, since many apps (Minecraft, f.e.) bundle their own Java runtime and copy of log4j. If you're playing a modified version, contact the author of the mod for details). (Minecraft is one of the applications that is vulnerable, if you're playing on a vanilla version < 1.18.1. ![]() Log4j is widely-deployed normal software that happens to have a bug with very severe consequences.Īn attacker can exploit the bug to get root privileges on the machine by doing something as trivial as sending a specially-formed text chat to a Minecraft player. It's sort-of-right in that the log4j vulnerability is not a virus, and could be right in the sense that Sophos doing a virus scan won't flag log4j files as viruses, because they're not viruses.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |