Top all-time · #7463
dvlabs.tippingpoint.com
Company blog · dvlabs.tippingpoint.com/blogsecurity
dvlabs.tippingpoint.com is the company blog at dvlabs.tippingpoint.com, writing about security. Since 2008, 11 different Hacker News readers have linked it 11 times, most often “Pwn2Own 2012 and Google Pwnium: Why Google may set AppSec back a few years”. No feed was found, so read it on the site itself.
Too few sampled comments (4) to say how often HN recommends it.?
Why HN links it
HN readers link DVLabs (TippingPoint's security research blog) for posts on browser exploitation contests such as Pwn2Own, including results, payouts and browser vulnerability details.
Summarised by Claude from a sample of 4 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Pwn2Own 2012 and Google Pwnium: Why Google may set AppSec back a few years2 people · 2 mentions · first linked 2012-03-01
- Announcing Pwn2Own 20112 people · 2 mentions · first linked 2011-02-02
What Hacker News says?
- nl · 2011-03-03
The Chrome sandbox protects pretty well against that kind of exploit. I bet $20K [1] that won't own Chrome. Also, I think Android 2.3.3 patches the webkit bug - there was a similar problem that held up the release somewhat. (Obviously that shouldn't understate the danger of that exploit against Safari or the Android browser) [1] of Google's money: http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011
Comment linking /blog/2011/02/02/pwn2own-2011
on “The mother of all Android malware has arrived” Submitted In-depth reverse engineering of USB missile launcher as a story · 4 points
HN discussionWell, it seems ZDI sort of missed the boat with their earlier statements about 60k not being enough. Quote: Due to our disagreement about the best way to get the most vulnerabilities fixed, Google has withdrawn sponsorship of Pwn2Own. We understand their reasons for doing so: they want to be able to receive the sandbox escape details to improve the security of their product. That is why they launched Pwnium. What we…
Comment linking /blog/2012/02/29/pwn2own-and-pwnium
on “Chrome exploit and sandbox escape demonstrated at CanSecWest, $60k awarded”Submitted Remote Code Execution Vulnerability found in Firefox 3.0 as a story · 4 points
HN discussionI just submitted this to the Federal Trade Commission complaints system: ----------- On this web-page: http://www.microsoft.com/windows/internet-explorer/get-the-f... Microsoft repeatedly make unfounded claims about the abilities of it's latest web-browser (Internet Explorer 8). These claims offer no statistical proof to back them up and are completely at odds with the considered opinions of most of the online commu…
Comment linking /blog/2009/03/18/pwn2own-2009-day-1---safari-internet-explorer-and-firefox-taken-down-by-four-zero-day-exploits
on “New IE8 marketing materials”Submitted Pwn2Own Challenges: Heapsprays are for the 99% as a story · 2 points
HN discussionAccording to the organizers, the latest versions of all browsers are used. http://dvlabs.tippingpoint.com/blog/2010/02/15/pwn2own-2010
Comment linking /blog/2010/02/15/pwn2own-2010
on “IE8, Safari 4, Firefox 3, iPhone fall on day 1 of Pwn2Own”Submitted Pwn2Own 2012 and Google Pwnium: Why Google may set AppSec back a few years as a story · 2 points
HN discussionSubmitted Mostrame la Guita! Adventures in Buying Vulnerabilities as a story · 2 points
HN discussionSubmitted Owning Kraken Zombies, a Detailed Dissection as a story · 2 points
HN discussionSubmitted Announcing Pwn2Own 2011 as a story · 1 points
HN discussion
