Re:The Resuts – Pwn2Own 2017 Day Three
by nickpsecurity on Sunday March 19, 2017 @10:14PM
(#13911215)
I wonder if it was operation or legacy software side that screwed up security potential of Edge. Microsoft did publish a design for strong security of browsers around the time Google did Native Client. Here was Microsoft's:
They're capable of making most of a browser immune to attacks likely to hit it. They can also make a strong system for containment. These simply weren't present in Edge to degree MS Research had designed. There's something blocking the transfer of those quite-practical tech that MS Research has been building.
https://www.microsoft.com/en-us/research/publication/the-mul...
Here's recent work on securing networked apps:
https://www.usenix.org/system/files/conference/osdi14/osdi14...
They're capable of making most of a browser immune to attacks likely to hit it. They can also make a strong system for containment. These simply weren't present in Edge to degree MS Research had designed. There's something blocking the transfer of those quite-practical tech that MS Research has been building.