6 ms·

What happened to Firefox?

tux1968 11y ago
Bit sad. http://www.eweek.com/security/pwn2own-hacking-contest-returns-as-joint-hpe-trend-micro-effort.html http://www.eweek.com/security/pwn2own-hacking-contest-return... mentions: "We wanted to focus on the browsers that have made serious security improvements in the last year," Gorenc said.
- jakobdabo 11y ago
  So, politics.
  - tux1968 11y ago
    As Firefox is my primary browser, I'd be happier if it was part of this competition. But it's fair for the organizers to not want to part with their prize money for a browser that hasn't been hardened much since the previous contest.
    - rockdoe 11y ago
      for a browser that hasn't been hardened much This claim is oft repeated, but the only reasons people seem to say it is that multiprocess + sandbox is not in release Firefox (it's in Nightly/Aurora/Beta). That doesn't necessarily make it true. There's been some blogs since about how the JS <-> C++ sandbox has actually been significantly strengthened, but people just ignore truths that don't fit their preconceptions. IE/Edge and Chrome also have sandboxes, and they still get cracked every Pwn2Own.
      - pjmlp 11y ago
        If it isn't in released, it isn't in the majority of people's computers. Normal people don't install development versions. A sandbox isn't full proof, but it is way better than not having anything.
  - dguido 11y ago
    No, Firefox is not even a challenge enough to be listed.
    - rockdoe 11y ago
      Easy money if it were true, as there's both official bug bounty programs and a black market. Unfortunately for you, it isn't.
      - tptacek 11y ago
        How much is a Firefox exploit worth, in any market, compared to a Chrome exploit? My understanding is: significantly less.
        pcwalton 11y ago
        The difference in the size of the userbase is a confounding factor, though, no?
        tptacek 11y ago
        It is, but that doesn't matter for this specific argument.
  - rockdoe 11y ago
    Yeah, they lost funding etc.
Scarbutt 11y ago
Don't worry, Firefox is becoming the most secure browser since less people are using it everyday.

tux1968 11y ago

Bit sad. http://www.eweek.com/security/pwn2own-hacking-contest-returns-as-joint-hpe-trend-micro-effort.html http://www.eweek.com/security/pwn2own-hacking-contest-return... mentions: "We wanted to focus on the browsers that have made serious security improvements in the last year," Gorenc said.

jakobdabo 11y ago
So, politics.
- tux1968 11y ago
  As Firefox is my primary browser, I'd be happier if it was part of this competition. But it's fair for the organizers to not want to part with their prize money for a browser that hasn't been hardened much since the previous contest.
  - rockdoe 11y ago
    for a browser that hasn't been hardened much This claim is oft repeated, but the only reasons people seem to say it is that multiprocess + sandbox is not in release Firefox (it's in Nightly/Aurora/Beta). That doesn't necessarily make it true. There's been some blogs since about how the JS <-> C++ sandbox has actually been significantly strengthened, but people just ignore truths that don't fit their preconceptions. IE/Edge and Chrome also have sandboxes, and they still get cracked every Pwn2Own.
    - pjmlp 11y ago
      If it isn't in released, it isn't in the majority of people's computers. Normal people don't install development versions. A sandbox isn't full proof, but it is way better than not having anything.
- dguido 11y ago
  No, Firefox is not even a challenge enough to be listed.
  - rockdoe 11y ago
    Easy money if it were true, as there's both official bug bounty programs and a black market. Unfortunately for you, it isn't.
    - tptacek 11y ago
      How much is a Firefox exploit worth, in any market, compared to a Chrome exploit? My understanding is: significantly less.
      - pcwalton 11y ago
        The difference in the size of the userbase is a confounding factor, though, no?
        tptacek 11y ago
        It is, but that doesn't matter for this specific argument.
- rockdoe 11y ago
  Yeah, they lost funding etc.

Scarbutt 11y ago

Don't worry, Firefox is becoming the most secure browser since less people are using it everyday.