Google Chrome's now faster: Octane score
Regarding improvements on Chrome, Google shares that it has also been working on reducing the browser’s start-up time, and setting up automated tests to catch any code changes that would slow Chrome down. “Speed is one of our core principles, so rest assured we’ll continue to make Chrome faster in every way possible,” it adds.
Google hosted its Pwnium 2 competition at Hack in the Box 2012 in Kuala Lumpur recently. The winner, Pinkie Pie, went home with a $60,000 prize and a free Chromebook. Pie, incidentally, had also won $60,000 in the first Pwnium competition held earlier this year. The bug that Pie had discovered relies on a WebKit Scalable Vector Graphics (SVG) compromise to exploit the renderer process. This time, he found a bug in the IPC layer to escape the Chrome sandbox.
In an official blog post on the Chromium blog, software engineer, Chris Evans shares that Pie took home the prize since this exploit fell within the parameters of a ““full Chrome exploit,” – thereby deserving the prize comprising – $60,000 and a free Chromebook. A “full Chrome exploit”, as Evans explains in the post “depends entirely on bugs within Chrome to achieve code execution.”
Recently, Google rolled out the first post-beta update for its Chrome browser for the Android platform. The update addressed various security issues and brings improvements for Chrome’s sandboxing technology, besides fixing other moderate bugs. The update was for devices running Android v4.0 (Ice Cream Sandwich) and later. Chrome is available only for devices running Android v4.0 or later.
Chrome’s sandbox technology helps ensure malicious mobile websites are contained and do not impact the entire browser. A post on the Google Chrome blog by software engineer Jay Civelli states that this is made possible by “the innovative multi-process architecture in Chrome for Android, in conjunction with Android’s User ID (UID) isolation technology”. He adds that Jelly Bean devices would automatically use this more in-depth sandboxing technology.