China Digital Times

翻墙 | 代理自动配置脚本――PAC文件

A proxy auto-config (PAC) file defines how web browsers and other user agents can automatically choose the appropriate proxy server (access method) for fetching a given URL.（摘自Wikipedia） ...
China Digital Times

翻墙利器，Proxy Auto Config

使用 Google 搜索时总是很容易碰触到 GFW 脆弱的神经，解决这个问题的办法是使用代理服务器。对于 Chrome 和 Firefox 来说，有大把的扩展来设置代理服务器，其它浏览器呢？ 其实主流的浏览器都支持一种智能的代理设置方式：Proxy Auto Config。pac 是一个 JavaScript 脚本 ...
Ars Technica

NPM package with 3 million weekly downloads had a severe vulnerability

Popular NPM package “pac-resolver” has fixed a severe remote code execution (RCE) flaw. The pac-resolver package receives over 3 million weekly downloads, extending this vulnerability to Node.js ...
Graham Cluley

Update now! Bug means large PAC files can crash Android phones

A security hole allows attackers to crash Android phones and force them to soft-reboot. Discovered by Nightwatch Cybersecurity software engineer Yakov Shafranovich, the bug hinges on what are known as ...
Network World

Disable WPAD now or have your accounts and private data compromised

The Web Proxy Auto-Discovery Protocol (WPAD), enabled by default on Windows and supported by other operating systems, can expose computer users’ online accounts, web searches, and other private data, ...
Threat Post

Attackers Using Malicious PAC Files in Phishing Attacks

Malware authors have developed a new, and frighteningly effective, tactic that uses a feature built into all of the modern browsers to redirect users to malicious sites without their knowledge or ...
Ars Technica

.pac file/proxy management

I need to use a juniper VPN tunnel to access certain applications. When that tunnel is active, I need to have IE point to a pac file behind the VPN. That is all fine and dandy. Until of course, I ...