4 ms·
Firefox has been a low-priority target for a couple years due to its waning user-base. In fact, Firefox wasn't even at Pwn2Own 2016 because hackers didn't think
by AdmiralAsshat 9y ago
Firefox has been a low-priority target for a couple years due to its waning user-base. In fact, Firefox wasn't even at Pwn2Own 2016 because hackers didn't think it was worth their time[0].
Hopefully with Quantum and a resurge in popularity, it'll become a target of white-hat hackers again.
[0] http://www.eweek.com/security/pwn2own-hacking-contest-returns-as-joint-hpe-trend-micro-effort http://www.eweek.com/security/pwn2own-hacking-contest-return...
- styfle 9y agoAre there historical records for number of "critical" vulnerabilities found in browsers? It would be interesting to compare the number for different browsers. Update Maybe this: http://www.cvedetails.com/product/15031/Google-Chrome.html?vendor_id=1224 http://www.cvedetails.com/product/15031/Google-Chrome.html?v... http://www.cvedetails.com/product/9900/Microsoft-Internet-Explorer.html?vendor_id=26 http://www.cvedetails.com/product/9900/Microsoft-Internet-Ex...
- mccr8 9y agoComparing the number of CVEs is not a good way to compare how vulnerable different browsers are. For instance, I believe that Firefox and maybe Chrome bucket together multiple internally reported vulnerabilities into a single CVE.
- lawnchair_larry 9y agoDon't do this, it's an anti-metric. Unless you think Opera and Konqueror are the most secure browsers.
- therealmarv 9y agoI heard a different story. Firefox was not at the contest because it was not in the same league as the others browsers (and not in a good way). See the last sentence of your link "We wanted to focus on the browsers that have made serious security improvements in the last year"
- gcp 9y agoA rather arbitrary claim with nothing to back it up. For sure, Firefox made more security improvements in 2016 than it did in some of the years where they did feature it.
- therealmarv 9y agolook here: https://it.slashdot.org/story/16/02/12/034206/pwn2own-2016-wont-attack-firefox-because-its-too-easy https://it.slashdot.org/story/16/02/12/034206/pwn2own-2016-w...
- gcp 9y agoCoincidentally it not being worth their time coincided with Mozilla not sponsoring the contest any more. You can make of that what you will.
- dveditz_ 9y agoMozilla has never sponsored the Pwn2Own contest.
- tinus_hn 9y agoThat is a great argument against the monoculture seen in some product categories. If (almost) everyone runs Windows you’re safer if you run Linux.