News Pwn2Own defeats Firefox, Safari, IE8, and iPhone

Doubtful tbh, just look at the 0day the other day, overflow caused by new WOFF feature, no script wouldnt protect against that, a lot of these overflows are cuased by file handling and exploiting plugins to handle aditional content rather than it being a bug in the rendering and javascript engines

Even a sandbox wouldnt protect if the fault is located in a plugin, and the plugin dev decides not to follow bestpractice or circumvent security measusre (adobe) then ur boned anyway

 

sometimes its good to see things like these, developers will just continue to better their programs in terms of security ( dunno bout apple though, honestly they dont seem to care much, a bug is found, they fix it months later and I doubt they are doing anything to improve their security)

 

to wipe the smug smiles off their faces? :- P

/. has an update on this where apparently Miller is wanting to show the developers how to find the vulnerabilities rather than just what they are

 

You're definitely wrong, NoScript did protect specifically against the WOFF bug, like it did with 99% of the Firefox vulnerabilities seen so far and with almost 100% of the working exploits, since they usually require also Javascript-based or plugin-based heap spraying.

Here's why NoScript has been blocking web fonts by default for a long time now.

 

But the fact remains that Mac users do not use anti viruses, so why would you target the harder target? Target the fools who are still oblivious, and perhaps your infection rate will shoot through the roof.

 

because it wouldn't be a challenge