Google Chrome hacked at $1m Pwnium contest

[steve2470]

http://www.slashgear.com/google-chrome-hacked-at-1m-pwnium-contest-08217485/

Eric Schmidt may have claimed that Google’s Chrome browser is “by far the safest” at his MWC 2012 keynote speech last week, but that hasn’t stopped an enterprising student from finding an exploit at CanSecWest Pwnium, an alternative to the Pwn2Own contest.

The Russian university student, Sergey Glazunov, managed to bypass Chrome’s sandbox and exploit two vulnerabilities in the extension sub-system. Glazunov finds bugs in the browser as part of Google’s bug bounty program, and was commended for his research work, as well as the exploit itself.

Talking to ZDNet, Justin Schuh, part of Google’s security team, said:

It didn’t break out of the sandbox [but] it avoided the sandbox. It was an impressive exploit. It required a deep understanding of how Chrome works. This is not a trivial thing to do

[Esse Quam Videri]

1. Errrr.......

Could someone translate?

[HopeHoops]

2. He went around the Maginot Line

[MrScorpio]

4. Think Kirk's Kobayashi Maru solution

Pretty damn slick, if you ask me.

[madokie]

3. I don't want anything to do with google, sure don't want chrome on my computer

I simply don't trust them with my information any more.

[qb]

5. IMO this makes Chrome a safer browser than IE. However...

since google got into the business of whoring out personal data, I've stopped using my Google account. I logged in once to "pause" their snooping (there wasn't a "stop" option).
Now I search with www.ixquick.com/ and startpage.com/ (the latter is a private search engine that uses Google)

[saras]

6. Who is defining "safe"?

What Google Chrome does, BY DESIGN, is not considered "safe" by a lot of people.