4

News: Google invites attacks on Chrome

view full story
linux-howto

http://www.raiden.net – Google has launched an experimental programme to encourage external security researchers to find and report vulnerabilities in its browser.$500 will be awarded for each bug found.Google is hoping that this will improve the security of its browser and therefore security for its users. Any bug found c ... (Distributions)

suki's picture
Submitted by suki on 01/30/2010 – Made popular on 01/30/2010

Stories similar to News: Google invites attacks on Chrome

Google just launched an update to Chrome for Android that provides the browser with a strengthened sandbox. Google says this will help ensure that malicious mobile sites remain contained and can’t impact the entire browser. It’s worth noting, though, that this enhanced sandbox will only be available to Android 4.1 Jellybean users.

In an effort to entice security researchers to look for holes in the Chrome browser, Google has announced it will pay $500 for bugs found in the code.

The stable branch of Google Chrome, a browser built on the WebKit layout engine that aims to be minimalistic and versatile at the same time, is now at version 23.0.1271.91.

Google Chrome 23.0.1271.91 has introduced a large number of changes and fixes into the stable branch, improving the security and functionality of the browser.

Highlights of Google Chrome 23.0.1271.91:

• The Flash conten

Yesterday I reported that security firm VUPEN claimed to have a Google Chrome browser exploit that bypassed the browser’s sandbox and Windows ASLR and DEP security measures. Today Google engineers are claiming that the bug isn’t with Chrome itself but in the Flash player bundled with the browser.

In an attempt to make Chromium more secure, Google is planning to get security experts to give more attention on Chromium’s security by providing a $500 reward for reporting bugs.

eSecurityPlanet: "Google is updating the stable version of its Chrome Web browser for Windows, Mac and Linux, addressing a handful of security vulnerabilities -- including four that could put users at risk simply by viewing a maliciously constructed image file."

Google has released version 5.0.375.99 of Chrome, a security update that addresses four "high" risk vulnerabilities in its WebKit-based browser, and a new Dev channel release that on Windows systems enables the new consolidated menu by default...

At this week's Black Hat security conference in Las Vegas, security researchers will be addressing SSL vulnerabilities, mobile attacks, Chrome OS security gaps, and & war-texting& -- a snooping technique that could also enable a car to be started remotely. Meanwhile, the nominations for the 2011 Pwnie Awards at Black Hat include a nod to Sony for its incompetence at security....

FYI, "Google boosts bonuses for Chrome bug bounty hunters" -

http://www.computerworld.com/s/artic...bounty_hunters

"...Evans outlined new bonuses that Google will award researchers who report certain kinds of flaws.