Tell me more ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.
up vote 1 down vote favorite

What can happen if I visit known malicious site using Linux with javascript, java and flash disabled. Is there an attack vector that can take place regardless?

share|improve this question
If you really want to visit the site, you could use a virtual appliance. Basically use something like a livecd within Virtual Box or your favorite VM. – Zoredache Aug 30 '10 at 20:55
I'm aware of that, but virtual box freezes my machine for some reason... – blockhead Aug 31 '10 at 0:47

3 Answers

up vote 2 down vote

There still could be vulnerabilities in the browser code itself.

share|improve this answer
up vote 2 down vote

Well, let's look at the stack from a browser exploit level.

  • Page Download: When you download the page, it could trace your computer, your ISP, etc. and launch a DDoS or similar on it.

  • Page Render: The page, when rendered, can very easily be exploited with browser exploits using stuff like drive-by downloads, although most (95%) of that can be avoided by disabling Javascript. Javascript isn't the only problem though—check out this CSS hack.

  • User Interaction: Which is the hugest part. Browsers are pretty darn secure nowadays—you aren't. Just because you visit a site without any security issues in sight doesn't mean that you're out of the woods.

If you really need to visit this site, the best way is buy using Chromium in a VM.

share|improve this answer
up vote 0 down vote

Use Lynx instead? I don't see how anything malicious could get by it.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.