News for hackers. Stuff that matters.

A comment on All Major Browsers Fall at Pwn2Own Day Two. Parent comment

Re:All Major Browsers Fall at Pwn2Own Day Two by ZitchDog on Friday March 20, 2015 @02:56PM (#9239896)
So, most sites won't work, and the ones that do work will still be vulnerable? Awesome.
[ Parent | on HN ]
Re:All Major Browsers Fall at Pwn2Own Day Two by rudolf0 on Friday March 20, 2015 @03:47PM (#9240257)
They're vulnerable if you whitelist them and they get hacked and exploit code is sent directly in the HTTP response. Just like how HTTPS (and HSTS and certificate pinning) does nothing for you if the server is compromised.

If you're careful about what you whitelist, NoScript adds a lot of additional security.

[ Parent | on HN ]