I think the point of this exploit is that the download does not need to feel ran...

		bthornbury on Nov 6, 2014 \| parent \| context \| favorite \| on: Reflected File Download: A New Web Attack Vector I think the point of this exploit is that the download does not need to feel random from the user perspective. A user can be prompted to update flash or chrome itself and then be served a (somewhat) legitimate looking file from the respective website.