3 ms·

I don't believe pwn2own is representative of the security landscape in general. Is that the only information you based your comment on?

• pcwalton 10y ago
  > I don't believe pwn2own is representative of the security landscape in general. It's representative of the state of the art in attacking large, mature, modern C++ codebases. > Is that the only information you based your comment on? No, it's due to watching lots of security bugs go by over the last several years. I work in this space, you know.
  • jjnoakes 10y ago
    > It's representative of the state of the art in attacking large, mature, modern C++ codebases. I would say it is representative of attacking client side desktop browser software and plugins. That seems quite a bit less representative of all C and C++ software, most notably excluding server-side software. > I work in this space, you know. That's why I was hoping for something more than "trust me" as a citation.