3 ms·
Comparable to Windows. Windows is a high-profile target for web browsing so you're seeing more exploits. Web browser escapes usually target the operating syste
by lima 9y ago
Comparable to Windows. Windows is a high-profile target for web browsing so you're seeing more exploits.
Web browser escapes usually target the operating system kernel in order to break out of the sandbox. Chrome can reduce its attack surface on Linux using seccomp, and while there's a win32 syscall filter on Windows 10, I'm not sure if Chrome uses it. Windows has stronger kernel self protection features than Linux, but also more attack surface.
Chrome uses Linux namespaces (like LXC/Docker/...) for isolation in addition to seccomp-bpf.
Chrome is by far the most secure one right now, but as evidenced by this blog article, Firefox is catching up.
- johncolanduoni 9y agoThe Chromium sandbox supports the Win32k mitigation, though it’s possible it’s not enabled at runtime.
- ryuuchin 9y agoChrome disables all win32k syscalls in its renderer/extension/plugin processes (at the very least flash and pdf). This has been the default for a while now. I believe the specific win32k syscall filter you're referring to (where you can white/black list specific syscalls) is still only accessible to Microsoft applications (Edge uses it).