All Major Browsers Fall at Pwn2Own Day Two

Re:All Major Browsers Fall at Pwn2Own Day Two by blacksmith_tb on Friday March 20, 2015 @02:52PM (#9239857)

I am surprised that Chrome OS + Chrome isn't an option. If it provided uncrackable, that would be good theater; and if not, still very useful to Google. Unless the possibility of tarnishing its reputation outweighs the benefits...

[ Parent | on HN ]

Re:All Major Browsers Fall at Pwn2Own Day Two by mccr8 on Friday March 20, 2015 @04:29PM (#9240491)

Google used to run a separate contest (at the same conference as Pwn2Own) called Pwnium for Chrome OS, but starting this year they are moving to a model where they pay similarly large bounties year-round rather than at contests.

http://googleonlinesecurity.blogspot.com/2015/02/pwnium-v-ne...

[ Parent | on HN ]

Re:All Major Browsers Fall at Pwn2Own Day Two by liyanchang on Friday March 20, 2015 @03:02PM (#9239944)

I was surprised by how few OS/Browser combinations were tested. For instance, I'd think that the OSX + Chrome population is pretty big and I'd (selfishly) like that combination tested.

It feels like, just the fact that this competition and other bug bounty programs exist, means that the big companies here have gotten over reputation tarnish and know that the patch is worth it.

[ Parent | on HN ]

Re:All Major Browsers Fall at Pwn2Own Day Two by lawnchair_larry on Friday March 20, 2015 @08:20PM (#9241418)

Any browser that can be exploited on Windows can be exploited easier on OS X. It lags far behind in mitigations. So, the Chrome/OS X combo is not done because it's redundant.

[ Parent | on HN ]

Re:All Major Browsers Fall at Pwn2Own Day Two by floatboth on Saturday March 21, 2015 @05:51PM (#9244322)

Windows has a huge amount of ridiculous attack surface like GUI rendering code in THE KERNEL: http://www.theregister.co.uk/2015/02/12/hacker_kicks_one_bit...

I'm pretty sure no system ever is going to be as exploitable as Windows.

[ Parent | on HN ]