Linked by Thom Holwerda on Fri 20th Mar 2009 13:51 UTC, submitted by google_ninja
Privacy, Security, Encryption Fresh from winning the PWN2OWN contest yesterday, Charlie Miller has been interviewed by ZDNet. He talks about how Mac OS X is a very simple operating system to exploit due to the lack of any form of anti-exploit features. He also explains that the underlying operating system is much more important in creating a successful exploit than the bowser, why Chrome is so hard to hack, and many other things.
Permalink for comment 354383
To read all comments associated with this story, please click here.
RE[5]: Comment by sadyc
by segedunum on Sun 22nd Mar 2009 01:27 UTC in reply to "RE[4]: Comment by sadyc"
segedunum
Member since:
2005-07-06

Chrome runs on Windows. The hacker was citing/implying that the randomization support in Windows is the reason Chrome gains that security.

That's one of the reasons, but as I'd indicated elsewhere in the other article it isn't just about the OS itself. This is a quote from Miller:

There are bugs in Chrome but they’re very hard to exploit. I have a Chrome vulnerability right now but I don’t know how to exploit it. It’s really hard. The’ve got that sandbox model that’s hard to get out of./


Chrome on OS X would have that vulnerability, until 10.6 arrives.

Not necessarily I'm afraid, although OS X itself might make it easier on another level. As Miller says, finding a potential entry is one thing. Turning it into something you can actually 'exploit' is a different ballgame.

Reply Parent Score: 3