All Major Browsers Fall at Pwn2Own Day Two

Re:All Major Browsers Fall at Pwn2Own Day Two by vamur on Friday March 20, 2015 @02:56PM (#9239888)

This particular exploit relies on Native Client, which is concerning since it is on by default and is hard to disable.

[ Parent | on HN ]

Re:All Major Browsers Fall at Pwn2Own Day Two by miles on Friday March 20, 2015 @03:44PM (#9240242)

Hard to disable? Just open chrome://flags and click Disable under Native Client.

[ Parent | on HN ]

Re:All Major Browsers Fall at Pwn2Own Day Two by vamur on Friday March 20, 2015 @04:12PM (#9240414)

And how many people know of Native Client, let alone about chrome://flags? Not to mention that advice won't work then not using a persistent Chrome profile. And Google removed "--disable-plugins" so it is not even possible to automate disabling these plugins short of recompiling Chromium.

[ Parent | on HN ]

Re:All Major Browsers Fall at Pwn2Own Day Two by hawski on Saturday March 21, 2015 @03:05PM (#9243831)

You have some point, but how many people even know what Native Client is? Or even JavaScript?

[ Parent | on HN ]