Apple eliminates CanSecWest Pwn2Own flaws

TalkBack 1 of 12:

Next »

• Thread View
• Flat View

Fault Elimination

I did see the SVG fix in your article on 10.5.7's release and your
relaying of Apple's attribution of discovery to "Nils."

Regarding the IE8 issue, this is difficult to research because the signal
to noise ratio is real low, but it looks as though IE8 fell on 3/19/09.
Microsoft's engineers were on site and within 12 hours found the
problem. 3/20 IE8 was officially released. That Monday, as I
remember, I read on ZDNet that IE8 fell because some of the security
features of IE8 were not activated on 3/19 but were activated over the
weekend and these security measures would have prevented IE8 from
falling. (I contemplated asking the question why were these features
off in the Beta/RC cycles, but it may have been a moment of
snarky weakness.) NeoWin.com reported on 3/20 that the engineers
promised a patch real soon and the site congratulated them on their
alacrity in the face of Mix09 duties.

So, I think the Pwn2Own IE8 problem was fixed, but I'm having a
difficult time proving it one way or the other.

Posted by: DannyO_0x98   Posted on: 05/14/09  (Edited: 05/14/2009 @ 04:43) You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Five Steps to Determine When to Virtualize YourServers VMware Server virtualization isn't just for big companies. Entry-level ... Download Now
• The True Costs of Virtual Server Solutions VMware In an economic environment that is repeatedly heralding the message "do ... Download Now
• The Impact of Virtualization Software on Operating Environments VMware Today's use of virtualization technology allows IT professionals to ... Download Now