News for hackers. Stuff that matters.

A comment on Virtual machine escape fetches $100k at Pwn2Own hacking contest. Parent comment

Re:Virtual machine escape fetches $100k at Pwn2Own hacking c... by rspeer on Saturday March 18, 2017 @04:43AM (#13900482)
This may not fit your preconceptions, but the article is saying that Edge is considered a difficult target for hacking.
[ Parent | on HN ]
Re:Virtual machine escape fetches $100k at Pwn2Own hacking c... by oceanswave on Saturday March 18, 2017 @10:30AM (#13901397)
Which is a strange preconception for the article to have given

https://www.cvedetails.com/vulnerability-list/vendor_id-1224...

vs

https://www.cvedetails.com/vulnerability-list/vendor_id-26/p...

[ Parent | on HN ]
Re:Virtual machine escape fetches $100k at Pwn2Own hacking c... by staticassertion on Saturday March 18, 2017 @10:58AM (#13901528)
As I said above, CVE listings are a useless metric for measuring safety of a product. High # of CVEs can easily indicate a safer product with a more mature bug bounty program or an attitude of "Assume it's vulnerable, don't require full exploits to prove it".

There is no good information to be drawn from those two links.

[ Parent | on HN ]