On: Google Chrome Hacked?

[bjonathan]

you know that there is more than one government on earth... and all of them arent pro free-speech :)

Safer software for all, because it's a better thing that VUPEN discover the bug than if it's discovered by some criminals who keep it secret and scam/hack

[quanticle → bjonathan]

Arguably, that's exactly what VUPEN is doing here. They're keeping it secret, and only letting those who are willing to pay have the necessary knowledge regarding this vulnerability and any possible workarounds. It might not be a scam, but I do find it morally questionable to hide the details of a bug of this significance.

[sswam → quanticle]

s/ those who are willing to pay / those (ONLY) who asked for and funded research into such a hack /

[jonknee → bjonathan]

> Safer software for all, because it's a better thing that VUPEN discover the bug than if it's discovered by some criminals who keep it secret and scam/hack

I suppose it depends on the point of view, but having it exclusively in the hands of governments can easily mean it's limited to criminals who keep it secret and hack.

[rsoto → bjonathan]

Thanks for your response, but my question remains.

Why would a entity as big as "the government" would invest in breaking one browser used by a minority (~10%) of users in the web? Wouldn't it be much easier to just compromise their Internet connections?

[sswam → rsoto]

Let's say that, like most everyone else in the world, they already know how to break firefox and internet explorer, etc. They don't want to spy on your net, they want to steal your files.