Chrome survives hacker challenge
- March 24, 2009 4:13 PM |
- By Paul Jay
by Paul Jay, CBCNews.ca.
Vancouver was host to the annual CanSecWest security conference last week, with the highlight of the competition the annual Pwn2Own contest, in which hackers try their hand at exploiting vulnerabilities in web browsers for computers and mobile phones.
And while many debates on the internet about security and web browsers tend to devolve into a shouting match between Mac and Windows users, the competition's results revealed browsers on both Windows and Mac OS have easy exploits: It didn't take too long before Apple's Safari, Mozilla Firefox and Microsoft's IE 8 all went down.
But what's interesting is that neither a collection of mobile browsers nor Google's Chrome fell in the competition.
Chrome was actually affected by one of the vulnerabilities that plagued another browser, but as hacker Charlie Miller told security expert Ryan Naraine, the problem with Chrome is developing a way to exploit the bug.
Chrome includes a security mechanism called a sandbox, which essentially uses an operating system's existing security measures to severely limit any access gained from a bug. (A more detailed description of the sandbox is here.)
It's not clear at this point if Google is onto something or if hackers just haven't bothered to go after Chrome in a concerted way, since, generally speaking, hackers don't tend to spend much time on browsers very few use.
After escaping this year's competition unscathed, perhaps Chrome will have a bulls-eye on it next year.
Here, by the way, is the link to the Pwn2Own Wrap Up.
Categories
All News blogs
Most Commented
Most Recommended
Tech Bytes
Most Commented
Most Recommended
Recent Entries
- Universe hates Higgs boson, Chicago Cubs
- By John Bowman, CBCNews. A physicist working on the Large Hadron Collider doesn't think much of the theory that the universe is sabotaging the project to prevent the discovery of the Higgs boson. Might as well say that Nature hates... Continue reading this post
- Large Hadron Collider goes Back to the Future
- By Peter Evans, CBCNews.ca. Two respected physicists have put forward the theory that the Large Hadron Collider's stated aim of finding the Higgs boson might be so abhorrent to nature that mysterious forces are traveling back through time and sabotaging... Continue reading this post
- Multi-touch concept for desktops: 10/GUI
- By John Bowman, CBCNews.ca. I'm a fan of alternative ideas for human-computer interaction, so this video caught my attention. It shows an idea for a ten-finger touchpad interface and associated changes in the way a computer would handle multiple windows.... Continue reading this post
is a multimedia producer for CBCNews.ca.
Comment (1)
Did the contest require the "target" browser to run as a user with full administrator rights? I'd call it a fixed contest if so, seeing that three heavyweights all failed where Google's upstart product passed.
My problem isn't with what browser a person uses. A web browser is just another application. My problem is with the people who insist on using their web browser in an insecure setup.
A regular user can duplicate Google's "sandbox" on Windows by just using it with a non-administrator user account. But this should be done with all desktop applications, not just web browsers.