3 ms·
It looks like these exploits require either shell access or installing an app that contains the exploit code. Apart from the Flash vulnerability, did any of th
by anondon 10y ago
It looks like these exploits require either shell access or installing an app that contains the exploit code.
Apart from the Flash vulnerability, did any of the exploits use Chrome to gain all permissions on the Pixel? That would be scary, because the user would just have to be served Javascript containing malicious code or visit an affected website.
Why isn't Linux or the BSDs usually included in these pawn competitions?
- deleted 10y ago[deleted]
- corecoder 10y ago> Why isn't Linux or the BSDs usually included in these pawn competitions? I think that there are not many companies willing to pay to find vulnerabilities in Linux and BSD.
- pjmlp 10y agoAt least for GNU/Linux, because it would be too easy given the current state of affairs as discussed this year's Linux Security Summit. http://arstechnica.com/security/2016/09/linux-kernel-security-needs-fixing/ http://arstechnica.com/security/2016/09/linux-kernel-securit... Given its use across the industry, and being written in C, GNU/Linux has become the target they used to joke about Windows since its existence. For the BSDs, I imagine only OpenBSD would be an hard nut to crack given their focus on security. Then again, it isn't an OS that has much desktop visibility like the systems that are part of this competition.