6 ms·

So, politics.

• tux1968 11y ago
  As Firefox is my primary browser, I'd be happier if it was part of this competition. But it's fair for the organizers to not want to part with their prize money for a browser that hasn't been hardened much since the previous contest.
  • rockdoe 11y ago
    for a browser that hasn't been hardened much This claim is oft repeated, but the only reasons people seem to say it is that multiprocess + sandbox is not in release Firefox (it's in Nightly/Aurora/Beta). That doesn't necessarily make it true. There's been some blogs since about how the JS <-> C++ sandbox has actually been significantly strengthened, but people just ignore truths that don't fit their preconceptions. IE/Edge and Chrome also have sandboxes, and they still get cracked every Pwn2Own.
    • pjmlp 11y ago
      If it isn't in released, it isn't in the majority of people's computers. Normal people don't install development versions. A sandbox isn't full proof, but it is way better than not having anything.
• dguido 11y ago
  No, Firefox is not even a challenge enough to be listed.
  • rockdoe 11y ago
    Easy money if it were true, as there's both official bug bounty programs and a black market. Unfortunately for you, it isn't.
    • tptacek 11y ago
      How much is a Firefox exploit worth, in any market, compared to a Chrome exploit? My understanding is: significantly less.
      • pcwalton 11y ago
        The difference in the size of the userbase is a confounding factor, though, no?
        • tptacek 11y ago
          It is, but that doesn't matter for this specific argument.
• rockdoe 11y ago
  Yeah, they lost funding etc.