Re:All Major Browsers Fall at Pwn2Own Day Two
by pcwalton on Friday March 20, 2015 @11:32PM
(#9241773)
> Starting to think that running apps within a container is the right way to go.
If you're talking about something like Linux containers, note that the Chrome Pwn2Own exploit involved a sandbox escape via a kernel exploit. (Though seccomp-BPF mitigates this to some extent on Linux.)
If you're talking about something like Linux containers, note that the Chrome Pwn2Own exploit involved a sandbox escape via a kernel exploit. (Though seccomp-BPF mitigates this to some extent on Linux.)