3 ms·

I am surprised that Chrome OS + Chrome isn't an option. If it provided uncrackable, that would be good theater; and if not, still very useful to Google. Unless

• liyanchang 12y ago
  I was surprised by how few OS/Browser combinations were tested. For instance, I'd think that the OSX + Chrome population is pretty big and I'd (selfishly) like that combination tested. It feels like, just the fact that this competition and other bug bounty programs exist, means that the big companies here have gotten over reputation tarnish and know that the patch is worth it.
  • lawnchair_larry 12y ago
    Any browser that can be exploited on Windows can be exploited easier on OS X. It lags far behind in mitigations. So, the Chrome/OS X combo is not done because it's redundant.
    • floatboth 12y ago
      Windows has a huge amount of ridiculous attack surface like GUI rendering code in THE KERNEL: http://www.theregister.co.uk/2015/02/12/hacker_kicks_one_bit_xp_to_10_windows_scroll_goal/ http://www.theregister.co.uk/2015/02/12/hacker_kicks_one_bit... I'm pretty sure no system ever is going to be as exploitable as Windows.
• mccr8 12y ago
  Google used to run a separate contest (at the same conference as Pwn2Own) called Pwnium for Chrome OS, but starting this year they are moving to a model where they pay similarly large bounties year-round rather than at contests. http://googleonlinesecurity.blogspot.com/2015/02/pwnium-v-never-ending-pwnium.html http://googleonlinesecurity.blogspot.com/2015/02/pwnium-v-ne...