3 ms·
Why is that interesting? It reflects number if users, not breeder security?
by stilisstuk 6y ago
Why is that interesting? It reflects number if users, not breeder security?
- px43 6y agoIf you track over time, which that site doesn't show, you'd see that "number of users" isn't much of a factor. There are a bunch of popular apps with shitty security practices that have cheaper bugs than less popular apps with better design practices. This is a great way to measure "attacker utility". That is, it's not only a measure of how rare some of these bugs are, but how useful they are to attackers. Chrome bugs have been significantly more expensive than IE bugs since long before Chrome overtook IE in popularity. For a while, Firefox bugs and Chrome bugs we neck and neck, because even though it was easier to find exploitable bugs in Firefox, the Intelligence Community was buying up Firefox bugs like mad in order to exploit Tor users, since Firefox is the underlying tech behind the Tor browser.