Remote Code Execution without ever visiting a website?

Remote Code Execution without ever visiting a website?

Disclaimer: The content in this video is for education and entertainment purposes to showcase the dangers of malware & malicious software. I do not encourage any form of illegal hacking, nor do I encourage the usage of game cheats, cracks or hacks.

Cracks are sometimes shown to highlight the dangers of software piracy, my content is not intended to teach anybody how to pirate, or maliciously hack.

(C) Eric Parker 2024

[WoolyCow]

i downloaded arc when it was really hyped up just to see what it was like, my findings were as follows:
- too much ram usage
- lack of customisability
- not being open source hurts
- garbage extension support
- lots of unused space
- screw forced sign in

- very pretty (sometimes)
- easals were cool

back to ff the next day :)

[Soccera]

I will never be installing a nonfree browser unless FF dies, chromium goes nonfree, brave goes nonfree or dies, and epiphany dies.

[joopie]

This is even more ridiculous because firestore makes it difficult for you to accidentally allow access to unintended resources by denying all requests by default and only granting access based on defined rules. This is the type of thing firestore teaches you on day one and something that even a basic pentest by someone that has never done any cyber security would reveal, or even a simple build test. This really gives me absolutely no confidence in this browser.

[danielrrbb]

"They're not making a browser they're making a wrapper for Chromium"

That's 99% of all browsers on Windows bruh.

[krcsirke]

That mouse moving cat reminds me old 2000's custom mouse icon programs, also it was great way get some pup or worse. Also, great way to track your mouse!

[zack_nap]

damn people get creative when creating rats

[pixelcatcher]

love the little kitty running over the site :D

[just_having_fun]

Hey man, really love your analysis! Absolutely on point; I have never had warm feelings towards ARC either. Using firebase as the server is wild.

[james-m-]

Yeah this company is not gonna last. This incident reeks of a severe lack of institutional knowledge, which pretty inevitably means there will be more of these massive blunders to come. Few want to pay money for something with well-established free competition, and even fewer want to make that purchase from a company known for monumental screwups.

[JJFX-]

By definition a power user would want as much control over their browser as possible. The only places I could see proprietary browsers getting pushed would be something branded for "security" or to target schools with an "education" browser.

Most people wouldn't believe what school districts get conned into. Most things sold to the one I worked with had a huge mark up and existing products often get rebranded by some random company targeting teacher conventions. For example, they bought a large format poster printer that had the company's sticker over every Roland logo, even on the ink cartridges that they of course sold. It came with an ancient computer (with their sticker over the Dell monitor) bundled with some clunky, proprietary "teacher friendly" design program that was supposed to be used. Naturally this also came with an ongoing service contract yet I ended up having to work on it whenever there was another issue.

[someever]

⚠1k subscribers until cat ears!!!⚠
edit: 400 subscribers we're almost there!!
edit 2: we just hit 100k!!!! congrats eric!!

[SciK.]

Hey Eric, theres something similar (I assume) in older COD games (COD Games before infinite warfare have this vulnerability) where people can remotely execute code when the user is simply on the game. I spent a lot of money on these old games on my pc just to read about this. I noticed that when i had one of the games installed (not even loading them up), my ethernet would just go out randomly. I replaced cables, routers and even motherboards and even did fresh installs on my c drive but nothing worked. When i uninstalled the game it finally fixed the issue. Can you explore this please?

[ItsDoms]

Just found your channel and I’ve caught myself binge watching your videos ever since, I really liked the one with connecting windows XP to the internet and the one where you press on every download button

[the-answer-is-]

I've only ever seen Arc used by streamers, but holy moly is it filled with deal breakers for me. I do not like how it stores things in Firestore and integrates with the cloud, that's just waiting for something like this to happen. Glad they fixed this particular issue quickly, though.

[lucassnp]

not me watching this on arc browser rn...

[nezu_cc]

Imagine paying for chromium with a theme.

[redrj]

can't wait until Theo finds out about this xD

[MetalMallard]

I don't think pay for a browser is the way, Arc have weird quirk like, losing all your tabs if it belong to another workspace, or bug that can just stop yourself from browsing until they patch.. I like the ui and all, but it can really be better, removing firebase is certainly one of the first step to achieve it

[RafiRo]

Now due to this video im not using Arc anymore, and im using my old browser now!, Thanks for Uploading this video!

[rudranilghosh]

Never liked the ARC interface, I'm currently using Vivaldi, it's not fully open source. But the huge amount of customizations alone keep me hooked to the browser, and the fact that it is made by former opera team. Have you checked it?