Comment on Microsoft doing shady Microsoft stuff again

• muhyb@programming.dev ⁨1⁩ ⁨day⁩ ago

  It’s actually fine if it doesn’t have internet connection.

  source

  • sugarfoot00@lemmy.ca ⁨1⁩ ⁨day⁩ ago

    That’s true of any OS.

    source
  • Jakeroxs@sh.itjust.works ⁨1⁩ ⁨day⁩ ago

    Who uses an OS without internet though lol

    source

    • muhyb@programming.dev ⁨1⁩ ⁨day⁩ ago

      For old software that don’t work on modern OSes.

      source

      • Jakeroxs@sh.itjust.works ⁨1⁩ ⁨day⁩ ago

        You must know that’s not a majority of the people refusing to update to 11 lol

        source

        • -> View More Comments
• HugeNerd@lemmy.ca ⁨1⁩ ⁨day⁩ ago

  I’ve heard that the last time I said I till use 7, six months ago. Still waiting for that malware. You understand the only way to get this malware is to actively download it and install it, yes?

  source

  • Jakeroxs@sh.itjust.works ⁨1⁩ ⁨day⁩ ago

    Thats not remotely true, there’s many ways to inject things through ads or hacked websites onto your computer without you intentionally installing or downloading anything. Much much more rare and on updated systems generally will be better protected from those things, however using an outdated OS intentionally is asking for trouble.

    source

    • HugeNerd@lemmy.ca ⁨1⁩ ⁨day⁩ ago

      Using an adblocker solves that. Not sure how that is specific to Win 7. Hacked websites? Name an example, source it. Difficulty: not from a movie with a skull and crossbones laughing on my screen. None of these hacker fantasies happen in real life. You do have a big hosts file and manage your router, yes? Give me a link to a “hacked website” (F! U! D! Oh my!) right now that I can click on and will install malware on my Windows 7 PC.

      Simply untrue. Hollywood fantasies.

      source

      • incompetent@programming.dev ⁨1⁩ ⁨day⁩ ago

        It’s called a Drive-by Compromise:

        Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. Multiple ways of delivering exploit code to a browser exist (i.e., Drive-by Target), including:

        • A legitimate website is compromised, allowing adversaries to inject malicious code

        • Script files served to a legitimate website from a publicly writeable cloud storage bucket are modified by an adversary

        • Malicious ads are paid for and served through legitimate ad providers (i.e., Malvertising)

        • Built-in web application interfaces that allow user-controllable content are leveraged for the insertion of malicious scripts or iFrames (e.g., cross-site scripting)

        Browser push notifications may also be abused by adversaries and leveraged for malicious code injection via User Execution. By clicking “allow” on browser push notifications, users may be granting a website permission to run JavaScript code on their browser.

        It’s not Hollywood fantasy, as you claim. It is a well documented attack vector.

        source

        • -> View More Comments