4 ms·

It's not a "Chromium" bug, it's project-zero bug [1]. https://bugs.chromium.org/ https://bugs.chromium.org/ is just a bug tracker site to host batch of projects

• GeekyBear 7y ago
  So where was the Project Zero blog post on the matter? Because if this wasn't announced on their blog I'm going to have to say that this particular case would not be an apples to apples comparison. Here was the Project Zero blog post on Apple's exploit, for comparison. https://googleprojectzero.blogspot.com/2019/08/a-very-deep-dive-into-ios-exploit.html https://googleprojectzero.blogspot.com/2019/08/a-very-deep-d...
  • Thorrez 7y ago
    Note that that blog post was published in August 2019, while the vulnerabilities mentioned in the blog post were reported in a wide range of dates from October 2017[1] to December 2018[2] (that's the latest one I found in a quick skim, maybe there are later ones). This Android vulnerability was reported September 2019[3], so it may take 8-22 months before the blog post comes out. The reporter does intend to post a blog post about it[3]. [1] https://bugs.chromium.org/p/project-zero/issues/detail?id=1417 https://bugs.chromium.org/p/project-zero/issues/detail?id=14... [2] https://bugs.chromium.org/p/project-zero/issues/detail?id=1731 https://bugs.chromium.org/p/project-zero/issues/detail?id=17... [3] https://bugs.chromium.org/p/project-zero/issues/detail?id=1942#c7 https://bugs.chromium.org/p/project-zero/issues/detail?id=19...
• hermanradtke 7y ago
  They CNAME the site and give P0 a dedicated domain if they wanted to alleviate this confusion.