Google pays record $26K in Chrome bug bounties

25.10.2011

AddressSanitizer can detect a variety of errors, including "use-after-free" memory management bugs like the ones reported by miaubiz.

Google also said it updated Chrome to stymie BEAST, for "Browser Exploit Against SSL/TLS," a hacking tool released last month that attacks browsers and decrypts cookies, potentially giving attackers access to encrypted website log-on credentials.

Previously, Google had added anti-BEAST protection to Chrome's "dev" and "beta" channels, the rougher-edged versions that precede the stable build.

so that its Internet Explorer isn't vulnerable to BEAST's attacks, but has not set a timetable.

Chrome 15's most obvious change, however, is the redesigned New Tab page that appears when users click the right-most tab at the top of the browser's window or press the Ctrl-T key combination.