Category: Google Chrome
Security flaws everywhere.
After Google Chrome has been hacked twice, Microsoft’s Internet Explorer 9 was the second browser to fail the security challenge.
By exploiting two unknown vulnerabilities, Vupen Security was able to remotely open a calculator running on a Windows 7 SP1 machine. While no additional details were revealed, both IE and Google Chrome exploits were a combination of at least a couple of previously unknown flaws.
Identified as a bug CVE-2011-3046, discovered vulnerability is described as “UXSS and bad history navigation”, with no additional details revealed.
Security contests prove to be useful.
Just as some might have thought that Google’s Chrome sandboxing feature is bullet proof, Sergey Glazunov, a security researcher who have found quite a few vulnerabilities in the fast, has enriched his life with a $60k reward, received for a “Full Chrome” exploit, which bypassed the sandbox feature. Although Google Chrome was previously known to withstand various attacks in Pwn2Own and similar contests, this time it was the first to fail.
Justin Schuh, Chrome’s security team member said, “It was an impressive exploit. It required a deep understanding of how Chrome works. This is not a trivial thing to do. It’s a very difficult and that’s why we’re paying $60,000.”
After last month’s interesting results, it’s time to see how did the February turned out for your favorite web browser.
For the second month in a row, Internet Explorer continues to increase its market share and is now up by 0.76 point, from 48.16% to 48.92%.
After the previous benchmark results that tested the latest stable versions of web browsers, people expressed their interest in the beta or alpha build results as well. Well, today is your lucky day, folks.
Tested web browsers
Internet Explorer 10 (IE10) Platform Preview
Internet Explorer 10 (IE10) Metro Platform Preview
Google Chrome 18 Beta
Firefox 11 Beta 5
Opera 12 Alpha
The keyword here is “up to”.
Called Pwnium, contest attendees will be asked to exploit the Google Chrome web browser and in return, will be rewarded as follows:
As some predict doom and gloom days for the Flash Player, it looks like Adobe has other plans and has now revealed its future plans for its widely used plugin.
Adobe Flash Player 11.2
Coming in Q1 2012, Flash Player 11.2 will expand hardware acceleration support for the older video cards, multi-threaded video decoding pipeline on the PC, right and left mouse clicks support and few other features
With the release of Windows 8 Consumer Preview, guys at Neowin have managed to benchmark the latest version of IE10, which is Internet Explorer 10 Platform Preview 5, running in both desktop and Metro modes.
What’s the difference between IE10 Metro and Desktop? IE Metro (aka Immersive web browser) uses the 64 bit libraries by default.
Introduced years ago, Do Not Track allows users to opt out of tracking by advertising, social and other web sites that enjoy such data.
However, it’s not coming anytime soon, according to the report, Google Chrome is likely to introduce Do Not Track feature by the end of this year, which is 8-10 months away.
WebKit, a rendering engine used by a variety of mobile web browsers, including Google Chrome and Safari, appears to have a very serious flaw, which allows attackers to take a complete control over your smartphone.
According to George Kurtz, the former CTO of McAffee, who have co-founded a new security startup CrowdStrike and discovered the vulnerability, this means that pretty much every smartphone and tablet has this flaw. He has also confirmed that Windows Phone users were not affected.
No further details were revealed.