4 ms·

I'm confused. Why would the government want to break Chrome? Also, if they are not going to release the exploit soon (especially to Google), why are you saying

by rsoto 15y ago

I'm confused. Why would the government want to break Chrome? Also, if they are not going to release the exploit soon (especially to Google), why are you saying 'safer software for all'?

bjonathan 15y ago
you know that there is more than one government on earth... and all of them arent pro free-speech :) Safer software for all, because it's a better thing that VUPEN discover the bug than if it's discovered by some criminals who keep it secret and scam/hack
- jonknee 15y ago
  > Safer software for all, because it's a better thing that VUPEN discover the bug than if it's discovered by some criminals who keep it secret and scam/hack I suppose it depends on the point of view, but having it exclusively in the hands of governments can easily mean it's limited to criminals who keep it secret and hack.
- rsoto 15y ago
  Thanks for your response, but my question remains. Why would a entity as big as "the government" would invest in breaking one browser used by a minority (~10%) of users in the web? Wouldn't it be much easier to just compromise their Internet connections?
  - deleted 15y ago
    [deleted]
  - sswam 15y ago
    Let's say that, like most everyone else in the world, they already know how to break firefox and internet explorer, etc. They don't want to spy on your net, they want to steal your files.
- quanticle 15y ago
  Arguably, that's exactly what VUPEN is doing here. They're keeping it secret, and only letting those who are willing to pay have the necessary knowledge regarding this vulnerability and any possible workarounds. It might not be a scam, but I do find it morally questionable to hide the details of a bug of this significance.
  - sswam 15y ago
    s/ those who are willing to pay / those (ONLY) who asked for and funded research into such a hack /
dkl 15y ago
"Why would the government want to break Chrome?" So they could run arbitrary payloads targeted at specific people.
probablyrobots 15y ago
Maybe I'm naive but it could simply be because they are evaluating it for internal use. The FBI and CIA don't want to use vulnerable browsers any more than we do.
- ryusage 15y ago
  I'm going to say that's definitely naive. It's a well-known fact that the US government has gradually been placing more and more emphasis on "cyber-warfare" over the last several years. A 0-day vulnerability allowing code execution (in a browser that's popular with tech-savvy users, even) is a very valuable tool in that regard.
sswam 15y ago
The Govt in question is obviously the US Govt. They want to know how to break Chrome, and every other net-facing app, so that they can hack your computer and spy on you, whoever you might be. Did you know, the CIA does do espionage?
- trotsky 15y ago
  Yeah, and no other governments do, especially not the french...

by rsoto 15y ago

I'm confused. Why would the government want to break Chrome? Also, if they are not going to release the exploit soon (especially to Google), why are you saying 'safer software for all'?

bjonathan 15y ago

you know that there is more than one government on earth... and all of them arent pro free-speech :) Safer software for all, because it's a better thing that VUPEN discover the bug than if it's discovered by some criminals who keep it secret and scam/hack

jonknee 15y ago
> Safer software for all, because it's a better thing that VUPEN discover the bug than if it's discovered by some criminals who keep it secret and scam/hack I suppose it depends on the point of view, but having it exclusively in the hands of governments can easily mean it's limited to criminals who keep it secret and hack.
rsoto 15y ago
Thanks for your response, but my question remains. Why would a entity as big as "the government" would invest in breaking one browser used by a minority (~10%) of users in the web? Wouldn't it be much easier to just compromise their Internet connections?
- deleted 15y ago
  [deleted]
- sswam 15y ago
  Let's say that, like most everyone else in the world, they already know how to break firefox and internet explorer, etc. They don't want to spy on your net, they want to steal your files.
quanticle 15y ago
Arguably, that's exactly what VUPEN is doing here. They're keeping it secret, and only letting those who are willing to pay have the necessary knowledge regarding this vulnerability and any possible workarounds. It might not be a scam, but I do find it morally questionable to hide the details of a bug of this significance.
- sswam 15y ago
  s/ those who are willing to pay / those (ONLY) who asked for and funded research into such a hack /

dkl 15y ago

"Why would the government want to break Chrome?" So they could run arbitrary payloads targeted at specific people.

probablyrobots 15y ago

Maybe I'm naive but it could simply be because they are evaluating it for internal use. The FBI and CIA don't want to use vulnerable browsers any more than we do.

ryusage 15y ago
I'm going to say that's definitely naive. It's a well-known fact that the US government has gradually been placing more and more emphasis on "cyber-warfare" over the last several years. A 0-day vulnerability allowing code execution (in a browser that's popular with tech-savvy users, even) is a very valuable tool in that regard.

sswam 15y ago

The Govt in question is obviously the US Govt. They want to know how to break Chrome, and every other net-facing app, so that they can hack your computer and spy on you, whoever you might be. Did you know, the CIA does do espionage?

trotsky 15y ago
Yeah, and no other governments do, especially not the french...