The main thing is not to install Flash!

Written by Mat on Tuesday, March 2, 2010 9:19 - 0 Comments

[via DownloadSquad by Jay Hathaway]

With the Pwn2Own hacking contest coming up at Vancouver’s CanSecWest security conference later this month, Italian computer security blog OneITSecurity took some time to interview Charlie Miller. Miller, in case you’re not familiar, is a security expert who has won Pwn2Own two years running by hacking Apple’s Safari browser with incredible speed. Safari isn’t the only target — this year, all major browsers and a selection of mobile operating systems will serve as Pwn2Own challenges – but it’s fair to say that Miller knows a thing or two about keeping your browser secure.

Here are the highlights from Miller’s interview:

He thinks Windows 7 will prove more secure than OS X Snow Leopard this year, in part because it doesn’t have Java and Flash enabled by default. Windows’ full ASLR (address space layout randomization) also gives it a security advantage.

When asked what he thought would make the safest OS and browser combo, he opted for Chrome or IE8 on Windows 7, with no Flash installed, although “there probably isn’t enough difference between the browsers to get worked up about.”

For my money, the juiciest quote from the interview was “The main thing is not to install Flash!

On the mobile side, Miller guessed that the iPhone 3GS would be more easily exploitable than the Motorola Droid, mainly because the iPhone’s been around longer, and has been subjected to more extensive security research.

You can check out Miller’s full answers (in English or Italian!) at OneITSecurity.

Share this post on digg, del.icio.us, facebook, blah blah blah


Leave a Reply

Comment

SocialStuff

RSS Feedburner LinkedIn Twitter Delicious Jen's MadeByGirl Blog

Quick Lists

  • Art Institute of Las Vegas
  • IMD123: Program Logic »
  • IMD213: Intermediate Scripting (SP09) »
  • IMD223: Advanced Scripting (SU08) »
  • IMD322: Dynamic Design (WI09) »
  • IMD325: User Centered Design (WI09) »
  • IMD335: Usability Testing (SP09) »
  • IMD335: Usability Testing (SP08) »
  • IMD345: UCD Integration (SU08) »
  • IMD375: Databases (FA09) »
  • IMD402: Server-Side Technology (WI09) »
  • Independent Studies (SU08) »
  • University of Nevada, Las Vegas
  • INF400: Web Security »
  • INF340: Web Design Concepts »

Yummy Delicious

Meanwhile on Flickr ... [Design//Diseño Pool]

Calibration 3
Orbital
New Confession
¨
Convocatoria Revista Göoo #10
X-TINA - APOCALIPSE
Poster da trupe
eliennis
Selo Skol Litrão
Cartaz Promoção Sub Zero
Cartaz pra PDV
Cartaz Promoção BR

Reading Recommendations



Soapbox

Jun 21, 2010 11:16 - 0 Comments

Innovation

More In Soapbox


IMD414 Dynamic Design

Jun 14, 2010 14:36 - 0 Comments

The Local Maximum

More In IMD414 Dynamic Design


INF400 Web Security

Jun 13, 2010 22:03 - 0 Comments

Fast CMS Deployment with jQuery and Web Services

More In INF400 Web Security