6 ms·
The net result in this case is the government owning a zero-day root exploit for every Chrome/Win citizen’s computer. It’s worse than zero-day because we have n
by alanh 15y ago
The net result in this case is the government owning a zero-day root exploit for every Chrome/Win citizen’s computer. It’s worse than zero-day because we have no reason to expect a patch, so the window of attack will stay open.
- kin 15y agoOut of speculation, would this tie in at all to an article I saw on HN a while back about the Government hiring 3rd parties to hack Google for some reason?
- GrandMasterBirt 15y agoIs it wrong for our government to do any security research? I mean can good things not come out of it? Be thankful it was reported.
- kin 15y agoI never said if anything was right or wrong, nor did I assume any of it, I just asked if it was related. Good to know curiosity gets flagged around here.
- deleted 15y ago[deleted]
- sswam 15y agomaybe Govt is envious because Google is already more powerful and capable and certainly better liked than it!
- AndrewMoffat 15y agoOn an exploit like this, I expect a patch. I'm sure people at Google and abroad (if the exploit exists in Chromium) are scrambling to find it, both for the e-cred and just to make other people safer.
- SkyMarshal 15y agoAgreed, no need to freak out, the sky's not falling. I expect Google will either find the spoit on their own, or pay what to them is a pitance to become a customer and acquire it that way. Sounds like a good company to have on the payroll anyway, doing what three years of Pwn2own hasn't managed to.
- cop359 15y agoIf if Google does find a serious security flaw, how can they be sure it's the same one?
- piaskal 15y agoJust ask vupen if their exploit still works on new version.
- Tyrannosaurs 15y agoUnless you're a customer of theirs why would you expect an answer to that?
- schrototo 15y agoWouldn't "the government" keep quiet about even having found an exploit? Why let VUPEN publicize this if they intend to use it?
- lukeschlather 15y agoThe government is generally more worried about keeping foreign governments out of high-tech firms like Google than about their ability to hack high-tech firms like Google.
- CGamesPlay 15y agoWhich government are you referring to?
- sswam 15y agoso, avoid .gov and similar :) it's a silly TLD anyway. Did the .gov pwn TPB and put their exploit up there?
- deleted 15y ago[deleted]