Skip to main content

Security firm claims to have hacked Chrome's sandbox


It didn't manage to do it during the most recent Pwn2Own challenge, but VUPEN Security is now claiming that it has finally managed to hack Google's Chrome browser and crack its so-called "sandbox." According to the firm, the exploit relies on some newly discovered zero day vulnerabilities, works on all Windows operating systems (and only Windows, apparently), and could give malicious websites the ability to download code from a remote source and execute it on a user's computer -- the video after the break shows an example, in which the Windows Calculator application is downloaded and run automatically. For its part, Google says it has been unable to confirm the hack since VUPEN hasn't shared any details with it -- something the firm apparently doesn't plan to do, as it says it only shares its vulnerability research with its "government customers for defensive and offensive security."


Comments

Popular posts from this blog

Scientist cooks up adjustable strength metals

As you may know, crafting a katana is a delicate process that involves carefully constructing a razor-sharp high-carbon edge around a soft shock-absorbent core. One day though, smiths and forging fires could be replaced by electrode-wielding mad-scientists, with the technology to selectively harden and soften metal at will. At least that's what we envisioned when we read about Jörg Weißmüller's breakthrough research in the field of nanomaterials. The German scientist discovered that by placing precious metals in acid he could create tiny ducts through corrosion. Once those channels are flooded with a conductive liquid, electrical currents can be used to harden the material and, if you change your mind about the brittle results, the effect can easily be reversed to make it soft again. The tech could eventually lead to self-healing vehicle armor or scratch-resistant cellphones -- but, really, we just want to zap our way to a high-quality samurai sword. Physorg

Samsung confirms WiFi-only Galaxy Tab availability: April 10th, $350

We've already seen it turn up on a few retail sites, but Samsung has now finally officially confirmed the launch details for its WiFi-only Galaxy Tab. It will be available online and at retail stores across the US on April 10th for $349.99. Specs otherwise remain the same as the 3G version, including a 7-inch 1024 x 600 display, 32GB 16GB of internal storage (with a microSD card slot for up to an additional 32GB), rear and front-facing cameras, and Android 2.2 with support for Flash 10.1 -- from the looks of things, it's also only available with a white back. Full press release is after the break. Note: The original press release incorrectly stated that there was 32GB of internal storage. There is, in fact, only 16GB. Samsung Galaxy Tab™ Available for Purchase at Multiple Retail Stores and Online Outlets Consumers receive chance to purchase WiFi-only version of Samsung's award-winning Android™ platform mobile tablet DALLAS--(BUSINESS WIRE)--Samsung Telecommu...

Commodore USA puts the new C64 up for pre-sales, unveils far-less-retrotastic VIC-Slim

Desktops Commodore USA puts the new C64 up for pre-sales, unveils far-less-retrotastic VIC-Slim By Sean Hollister posted Apr 6th 2011 8:43PM Now that Commodore USA has sufficiently piqued your curiosity with a revamped Commodore 64 prototype, it's ready to capitalize on the idea. Quite literally, we might add. $595 buys you the basic basic model with an 1.8GHz dual-core Intel Atom D525 chip, NVIDIA ION 2 graphics, 2GB of RAM and a 160GB hard drive -- which it promises to deliver by "early June" -- with hundred-dollar increments adding premium features like an additional 2GB of memory, a Blu-Ray drive, up to 1TB of storage, 802.11 b/g/n WiFi and Bluetooth. However, if you're simply looking for a compact keyboard computer (rather than reliving 80's nostalgia) there's another option on tap -- a likely rebadged thin wedge of a machine that Commodore's...