Skip to main content

Security firm claims to have hacked Chrome's sandbox


It didn't manage to do it during the most recent Pwn2Own challenge, but VUPEN Security is now claiming that it has finally managed to hack Google's Chrome browser and crack its so-called "sandbox." According to the firm, the exploit relies on some newly discovered zero day vulnerabilities, works on all Windows operating systems (and only Windows, apparently), and could give malicious websites the ability to download code from a remote source and execute it on a user's computer -- the video after the break shows an example, in which the Windows Calculator application is downloaded and run automatically. For its part, Google says it has been unable to confirm the hack since VUPEN hasn't shared any details with it -- something the firm apparently doesn't plan to do, as it says it only shares its vulnerability research with its "government customers for defensive and offensive security."


Comments

Popular posts from this blog

Scientist cooks up adjustable strength metals

As you may know, crafting a katana is a delicate process that involves carefully constructing a razor-sharp high-carbon edge around a soft shock-absorbent core. One day though, smiths and forging fires could be replaced by electrode-wielding mad-scientists, with the technology to selectively harden and soften metal at will. At least that's what we envisioned when we read about Jörg Weißmüller's breakthrough research in the field of nanomaterials. The German scientist discovered that by placing precious metals in acid he could create tiny ducts through corrosion. Once those channels are flooded with a conductive liquid, electrical currents can be used to harden the material and, if you change your mind about the brittle results, the effect can easily be reversed to make it soft again. The tech could eventually lead to self-healing vehicle armor or scratch-resistant cellphones -- but, really, we just want to zap our way to a high-quality samurai sword. Physorg

Commodore USA puts the new C64 up for pre-sales, unveils far-less-retrotastic VIC-Slim

Desktops Commodore USA puts the new C64 up for pre-sales, unveils far-less-retrotastic VIC-Slim By Sean Hollister posted Apr 6th 2011 8:43PM Now that Commodore USA has sufficiently piqued your curiosity with a revamped Commodore 64 prototype, it's ready to capitalize on the idea. Quite literally, we might add. $595 buys you the basic basic model with an 1.8GHz dual-core Intel Atom D525 chip, NVIDIA ION 2 graphics, 2GB of RAM and a 160GB hard drive -- which it promises to deliver by "early June" -- with hundred-dollar increments adding premium features like an additional 2GB of memory, a Blu-Ray drive, up to 1TB of storage, 802.11 b/g/n WiFi and Bluetooth. However, if you're simply looking for a compact keyboard computer (rather than reliving 80's nostalgia) there's another option on tap -- a likely rebadged thin wedge of a machine that Commodore's...

Compal's 'Ultra Mobile' Ultrabook eyes-on

Intel's already teased Compal's "Ultra Mobile" Ultrabook from afar, but when this Ivy Bridge laptop popped up on the show floor after the Computex keynote, we decided to give it a closer look. While this prototype isn't quite in the same league as ASUS' gorgeous UX21, do bear in mind that we're still looking at a relatively slim package for a 14- to 15-inch Core i7 rig. Also visible around the machine are a couple of USB 3.0 ports, an HDMI-out port, a LAN socket, and an SD card reader. Until we hear more about this Ultra Mobile, enjoy our eyes-on photos below. Compal's 'Ultra Mobile' Ultrabook eyes-on omment