3 ms·
China and the USA both have access to the Windows and IE source code, correct? So presumably they have as many pre-0day vulnerabilities as are ever needed.
by rms 17y ago
China and the USA both have access to the Windows and IE source code, correct? So presumably they have as many pre-0day vulnerabilities as are ever needed.
- tptacek 17y agoYou're crazy if you think access to IE source code is anything more than a speed bump for vulnerability researchers. Microsoft code is among the easiest to reverse out in a disassembler, and they publish symbols. In any case, this vulnerability looks remarkably straightforward. You could conceive of the fuzzer that might have found it. It would be an extremely clever fuzzer, but not an unprecedented one.
- rms 17y ago(I know very little about security research, which is readily apparent... should have phrased the second part of previous question as a comment as well)
- tptacek 17y agoMaybe, but you shouldn't get downvoted for it. ;)
- emil0r 17y agoHow hard, or easy, is it to make a really secure browser while at the same time keeping all the jazz that makes say, GMail work?