Free Republic
Browse · Search
General/Chat
Topics · Post Article

To: antiRepublicrat
Everybody needs to look to Chrome, which was never compromised.

Chrome really wasn't attempted to be hacked though. I believe they were a late attender to the festivities.

Charlie Miller has said he had a list of 25 hacks (or something like that) and has enouraged Apple to take security seriously or he will continue to win that contest with those 25 hacks releasing one per year.

So while the hack is announced to apple after he told them BEFORE hand that he has 25 exploits and has had them for a long while.

31 posted on 07/22/2010 8:17:40 AM PDT by for-q-clinton (If at first you don't succeed keep on sucking until you do succeed)
[ Post Reply | Private Reply | To 30 | View Replies ]


To: for-q-clinton
Chrome really wasn't attempted to be hacked though. I believe they were a late attender to the festivities.

Win7/Chrome was the configuration of one of the four target computers for the entire contest. It was eligible for the prize money if hacked, just like the rest.

Charlie Miller has said he had a list of 25 hacks (or something like that) and has enouraged Apple to take security seriously or he will continue to win that contest with those 25 hacks releasing one per year.

Given your prior history, you have to show me proof of that. Apple released a patch covering a bunch of Safari security bugs just before the last contest. It's pretty obvious they did it so Safari wouldn't get hacked again. So you're telling me they purposely didn't fix just Miller's submissions knowing that not doing so would result in him hacking Safari again?

Miller also has a hard-on for DEP and ASLR; they are his main focus for talking about the Mac. He is right about the advantages they bring and that Apple could do more work to implement them better. But he forgets that many common Windows apps don't support them fully anyway, or even at all. You see, Windows apps have to be written specifically to support DEP and ASLR, or they don't get the security advantages. So the real-world security of your average Windows user isn't improved all that much by DEP and ASLR.

34 posted on 07/22/2010 8:49:47 AM PDT by antiRepublicrat
[ Post Reply | Private Reply | To 31 | View Replies ]

Free Republic
Browse · Search
General/Chat
Topics · Post Article


FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson