Shiny Shells, Rusty Cores: A Crowdsourced Security Evaluation of Integrated Web...
summary
A crowdsourced dynamic analysis using Check Engine plus an extended browser audit and a user‑agent fingerprint shows 76 enrollments across 53 products and 68 software versions; many embedded browsers ship already stale with a median browser age of 1.27 years at product release, and 13 products with repeat enrollments reveal update gaps. Security policies are mostly present but obsolete engines let known CVEs be reproduced on devices (e.g., e‑reader/tablet). Causes: technical coupling, oversight, and vendor neglect; fixes: separate UI engine, transparency, and labels.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 1:56Security gaps in embedded browsers
- 2:38Crowdsourcing study with Check Engine
- 4:08Evaluation methods and results
- 7:01Outdated browsers at launch
- 8:49Case studies and vulnerabilities
- 9:32Reasons for browser obsolescence
- 10:36Solutions and oversight
- 11:18Key takeaways
related talks
39mHard to Port! - A Snapshot of the Vulnerability Landscape in 2015
46mThe Supply Chain Conundrum: Why Traditional Application Security Is...
40mSecuring your dependencies
44mNight of the living vulnerabilities
38mFinding Security Issues in Open Source
32mJavaScript security: a retrospective
23mSecure Code, Safe Future: Mastering Security in Critical Software Development
43m50 Shades of AppSec