3 ms·
OTOH, the original Chromium is so popular that the motivation of finding these bugs is very high. I think zero-day RCE bugs can be sold for tons of money on the
by Const-me 2y ago
OTOH, the original Chromium is so popular that the motivation of finding these bugs is very high. I think zero-day RCE bugs can be sold for tons of money on the black market.
However, the motivation to find similar bugs in Thorium is very low, too few users. And because the project messes with compiler flags, there’s chance at least some of the Chromium bugs don’t apply to the fork, because the machine code is different. Or maybe they apply but require adjustments to the exploit, which most attackers won’t do because too few users of the fork.
- resource_waste 2y agoThis is one of the interesting parts about owning obscure phones. I cannot imagine having anything important on an iPhone since there is a huge demand to find a bug in the hardware/OS layer. (And we've seen this live in the wild with multiple 0 click exploits) Meanwhile obscure phones could only be targeted by Pegasus by: 1. Go to a website and download an app 2. Change your settings to allow this app to install 3. Change another setting to allow this app to install. I mean... not really elite hackers, I had to do this for my own Android app.