HelloThur
Joined 6 years ago
Karma
248
Submissions
8
Member since
Aug 10
Recent submissions
Comment · 5 years ago
Comment · 5 years ago
Thats a valid point if we're referring to relatively unknown browsers. But the main three browsers are all high profile enough that they all have significant eyes on them and are thoroughly tested.
Firefox may have a small market share, but exploits for Firefox may even have more value to some entities/governments, due to its use in Tor Browser.
To clear any confusion, all three are extremely secure in comparison to other types of products (which is why exploits are so expensive), however Chrome just edges ahead, due to its sandboxing, and rapid patch cycle.
Comment · 5 years ago
In the security industry it's commonly known Chrome has the best security, this partly due to the amount of money Google invests in finding vulnerabilities (via fuzzing) in Chrome.
For "proof", you can check how much exploit vendors pay for exploits for each browser. For example Zerodium offer:
* $500k for Chrome RCE
* $100k for Safari RCE
* $100k for Firefox RCE
https://zerodium.com/program.html
The higher amount would generally indicate its harder to get an RCE in Chrome.
Comment · 6 years ago
I feel there is an opportunity for a modern forum platform. Similar to how Slack and Discord are replacing many IRC channels.
Comment · 6 years ago
"97% of companies have data leaks and other security incidents exposed on the Dark Web" - Bold claims. Do you have any proof of this? Such as redacted screenshots or examples of these leaks?
The article shows lots of stats, but no real evidence.
Comment · 6 years ago
Wow, didn't expect this post to blow up like this.
For reference, I have no 2FA, nor did I lose my corporate device. I've always accessed it through a web browser, never through a mobile, therefore when it asks me to verify with my corporate mobile device, I do not know what device it is referring to.
Take a look at https://zerodium.com/program.html
Apache and Nginx have a very similar market share. Nginx has higher share in top 10k websites, Apache has slightly higher share overall.
Yet Apache has over double the price as nginx exploits:
* Apache RCE 500k
* Nginx RCE 200k