![\"\"](\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2017\/02\/SVGXImages.jpg\")
JavaScript is hands down the tool of choice of hackers who are interested in inserting malicious code onto a user\u2019s device.<\/p>\nJavaScript is hands down the tool of choice of hackers who are interested in inserting malicious code onto a user\u2019s device.<\/p>\n
Most commonly, scripts are embedded in compressed (zipped) files, and when unpacked, install on the user\u2019s machine without him or her even being aware of what\u2019s going on. The problem has reached such epic proportions that Google has recently made changes to their Gmail service that makes it impossible to attach JavaScript files at all.<\/p>\n
Unfortunately, that doesn\u2019t appear to have done anything to stem the tide, although it has created a very small amount of extra work for the hackers of the world.<\/p>\n
They\u2019ll still be able to use .js files after all, but with the added step of injecting them into an SVG.<\/p>\n
SVG is a file format used by vector graphics. A little known fact about the file format is that it can be loaded with JavaScript code to change the behavior of the graphic in some way, to add an animation effect, for example.<\/p>\n
In other words, Google\u2019s latest move, while admirable, is a bit like closing a single hatch on a boat that has sprung a thousand leaks.<\/p>\n
The water (or, in this case, the malicious code) will simply go around the hatch that has been closed off and find another way in, and that is, in fact, what is happening.<\/p>\n
The key problem here is twofold.<\/p>\n
First, hackers essentially invented the internet. That is, in large part, why they\u2019re always several steps ahead of those who try to defend against them.<\/p>\n
Second, so many key elements of the internet are built on technologies and using code that is decades out of date, therefore easily exploited.<\/p>\n
Hardly a day goes by that we don\u2019t hear about some new critical vulnerability, and that\u2019s due in large part to the fact that so much of the code we rely on is extremely old, legacy code that\u2019s simply not up to today\u2019s security standards.<\/p>\n
Sadly, there\u2019s no good way to fix that.<\/p>\n","protected":false},"excerpt":{"rendered":"
JavaScript is hands down the tool of choice of hackers who are interested in inserting malicious code onto a user\u2019s device. Most commonly, scripts are embedded in compressed (zipped) files, and when unpacked, install on the user\u2019s machine without him or her even being aware of what\u2019s going on. The problem has reached such epic […]<\/p>\n","protected":false},"author":5,"featured_media":25148,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[34,30,36],"yoast_head":"\n