Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Chrome only browser left standing after day one of Pwn2Own

arstechnica.com

Post reply on HN
Print view View original

1–10 of 16 posts

Re: Chrome only browser left standing after day one of Pwn2Own

#3

Post by biotech »

tptacek wrote: post #2

On the other hand, Chrome is the browser security researchers know the least about; it's not an apples-to-apples comparison, yet.

There are a couple other points, though:

- Chrome is only available for Windows ATM. Windows boxes are apparently more difficult to crack than Macs.

- Chrome runs in a sandbox, unlike IE or Safari, which adds some security as well.

Re: Chrome only browser left standing after day one of Pwn2Own

#6

Post by j2d2 »

ntyntyesr wrote: post #4
tptacek wrote: post #2

On the other hand, Chrome is the browser security researchers know the least about; it's not an apples-to-apples comparison, yet.

Comparing mobile browsers they ignored Opera - the most common mobile browser and the most secure.

Do you think it's more common than safari on iphone? Do you have any way to verify that?

Re: Chrome only browser left standing after day one of Pwn2Own

#7

Post by jonknee »

j2d2 wrote: post #6
ntyntyesr wrote: post #4

Earlier quoted context omitted.

Comparing mobile browsers they ignored Opera - the most common mobile browser and the most secure.

Do you think it's more common than safari on iphone? Do you have any way to verify that?

Opera Mobile has significantly more installs than Mobile Safari, but Safari probably has greater market share in terms of mobile visits (because iPhone users use Safari quite a bit).

As for numbers, Opera says there are more than 120m installations of Opera Mobile:

http://www.opera.com/mobile/

They have another product, for less powerful phones (it does rendering via a proxy actually) that has 20 million users. Since the requests are all proxies, Opera knows how many people use this product:

http://www.opera.com/mini/

Re: Chrome only browser left standing after day one of Pwn2Own

#8

Post by axod »

>> "after day one"

Isn't this all a big theatre type thing anyway? Aren't exploits prepared well in advance anyway?

It'd be a more interesting competition if the competitors were given never before seen new versions of browsers, and asked to crack them on the spot.

Re: Chrome only browser left standing after day one of Pwn2Own

#9

Post by tptacek »

ntyntyesr wrote: post #4
tptacek wrote: post #2

On the other hand, Chrome is the browser security researchers know the least about; it's not an apples-to-apples comparison, yet.

Comparing mobile browsers they ignored Opera - the most common mobile browser and the most secure.

I have no idea why you think Opera is the most secure mobile browser.

Re: Chrome only browser left standing after day one of Pwn2Own

#10

Post by stcredzero »

TimothyFitz wrote: post #5

Guessing this is a symptom of: Tiny market share Radically different approach to security (heavy sandboxing, multi-process) We don't yet know if Chrome is actually more secure.

I'd bet that it is. I can't think of a fair way to adjudicate that, though.
Post reply on HN