All Major Browsers Fall at Pwn2Own Day Two

Re:All Major Browsers Fall at Pwn2Own Day Two by liyanchang on Friday March 20, 2015 @03:02PM (#9239944)

I was surprised by how few OS/Browser combinations were tested. For instance, I'd think that the OSX + Chrome population is pretty big and I'd (selfishly) like that combination tested.

It feels like, just the fact that this competition and other bug bounty programs exist, means that the big companies here have gotten over reputation tarnish and know that the patch is worth it.

[ Parent | on HN ]

Re:All Major Browsers Fall at Pwn2Own Day Two by lawnchair_larry on Friday March 20, 2015 @08:20PM (#9241418)

Any browser that can be exploited on Windows can be exploited easier on OS X. It lags far behind in mitigations. So, the Chrome/OS X combo is not done because it's redundant.

[ Parent | on HN ]

Re:All Major Browsers Fall at Pwn2Own Day Two by floatboth on Saturday March 21, 2015 @05:51PM (#9244322)

Windows has a huge amount of ridiculous attack surface like GUI rendering code in THE KERNEL: http://www.theregister.co.uk/2015/02/12/hacker_kicks_one_bit...

I'm pretty sure no system ever is going to be as exploitable as Windows.

[ Parent | on HN ]