Security firm exploits Chrome zero-day to hack browser, escape sandbox

[steve2470]

http://www.computerworld.com/s/article/9216542/Security_firm_exploits_Chrome_zero_day_to_hack_browser_escape_sandbox?taxonomyId=85

Computerworld - French security company Vupen said today that it's figured out how to hack Google's Chrome by sidestepping not only the browser's built-in "sandbox" but also by evading Windows 7's integrated anti-exploit technologies.

Google said it was unable to confirm Vupen's claims.

"The exploit ... is one of the most sophisticated codes we have seen and created so far, as it bypasses all security features including ASLR/DEP/Sandbox," said Vupen in a blog post Monday. "It is silent (no crash after executing the payload), it relies on undisclosed ('zero-day') vulnerabilities and it works on all Windows systems."

Vupen posted a video demonstration of its exploit on YouTube.

[RandomThoughts]

1. And what if the hack features.

Are built into the code base to be used by people in black rooms at various corporations.

Although not specifically talking about that browser. Most of the big companies, are either complicit with the private sector security state, and/or the public sector security state.

I have seen people in corporations brag about having security 'tools' other people do not have.

And have had continual hacks on various parts of programs on my computer. Mostly it is harassment by noun substitutions to create perception of correlation. (side note there are some noun usages that are not done by people, but have seen hacks done by people trying to emulate that effect)

Although there are lots of other forms of hacks used.

shrug, they are racking up debt to me of beer and travel money, so it does not bother me. Some day I might falter and think some not better ideas. When I was moved to a different internet segmenet years ago, some asshole when I commented on what they were doing said they would explain it some day.

Here are the various possible reasons without need of explanation.

Quantum pocket, the idea of isolating someone to find how to better break a type of person.
Isolation, trying to quarantine someone thinking what they post that is read matters.
Ego, some like to think that means they have power if they can isolate outside of justice.
It is part of an idea that 'some' think they can decide without justice or just action to try to inhibit someone elses success or areas.

For years I never had a single virus program detect a single virus, yet have seen many people hacking away, so much so they have many times even shown when they do it by popping dialogs or altering files for conversations.

shrug, why would it matter.

I am due beer and travel money, and that will be sent.



There is a delusion about that.
Although if I become like them, then they would all eventually fall over dead, and their guidance would have done what it wanted, becuase I would become dark side like them. They are in perpetual suicide by cop mode, trying to get someone to remove them, and join what guides them. (side note, there are just ways to remove someone, but that is not vengeance, but acts of justice with compassion)

There are delusions also in the supernatural, about somethings that are in despair that want to die, or don't want to exist, and so they put those feelings into people, hoping when the people die they will die. So many of the control freaks that are never full, are actually in despair and in perpetual suicide by cop attempts.

Although in my thoughts it is more 'death race' where supernatural things try to get people to self destruct, and suicide by cop is one way they do that.

The idea of emperor always trying to find someone to replace Darth by getting someone to turn dark side and kill Darth. Which is why I don't think getting upset at them helps at all, and why it does not bother me when they harass and hack, and instead I hope the best for them.

Although I am due beer and travel money and many experiences.

Side note, that refudiates 'sour grapes' also.