Chrome exploit and sandbox escape demonstrated at CanSecWest, $60k awarded

Re:Chrome exploit and sandbox escape demonstrated at CanSecW... by cpeterso on Wednesday March 07, 2012 @05:30PM (#3677597)

Though Pwnium may (quietly) reveal exploits in Chrome, Google will conveniently not be featured in sensationalist headlines about Chrome being hacked more quickly or often than other browsers at Pwn2Own.

[ Parent | on HN ]

Re:Chrome exploit and sandbox escape demonstrated at CanSecW... by nl on Wednesday March 07, 2012 @05:45PM (#3677648)

Are you familiar with the Chrome's history at Pwn2Own?

Its success at avoiding attacks has been a great marketing tool for Google.

Even with this Pwnium exploit don't make the mistake of thinking Chrome is an insecure browser. By any measure it is the safest (graphical, full featured) browser around by a long way.

[ Parent | on HN ]

Re:Chrome exploit and sandbox escape demonstrated at CanSecW... by Tobu on Wednesday March 07, 2012 @05:49PM (#3677667)

https://twitter.com/VUPEN/status/177518987972849664

[ Parent | on HN ]

Re:Chrome exploit and sandbox escape demonstrated at CanSecW... by lawnchair_larry on Wednesday March 07, 2012 @06:06PM (#3677742)

So for people as confused about this as I was, there are two similar but distinct contests at CanSecWest right now. Google Chrome is a target in both of them, and it has fallen in both of them.

This tweet refers to Pwn2Own, which is the one sponsored by ZDI, and which VUPEN apparently won (without having to share their exploit). The other, pwnium, is the Google-sponsored contest.

[ Parent | on HN ]

Re:Chrome exploit and sandbox escape demonstrated at CanSecW... by Shank on Wednesday March 07, 2012 @06:06PM (#3677740)

Bypassing DEP on Windows isn't a Chrome vulnerability. They published this months ago.

[ Parent | on HN ]