• No, ChromeOS isn’t impervious

    Just so you know, Google awarded a $100,000 bug bounty to an anonymous contributor for finding a security hole in a beta version of ChromeOS.

    According to Google’s release notes for the current version of ChromeOS, from two weeks ago:

    Stable Channel Update for Chrome OS / Security Fixes

    [$100,000][766253] Critical: Persistent code execution on Chrome OS. Reported by Anonymous on 2017-09-18

    It’s the kind of security hole we see a half-dozen times a month in Windows. Google caught and fixed the bug before releasing the version of ChromeOS:

    We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.

    A very different mindset, yes?