Despite the survival of Google Chrome and the fall of Internet Explorer 8 (running on Windows 7), all the browser hackers at the contest maintained that Microsoft’s browser is by far the most difficult to exploit. For starters, IE 8 is the only browser to fully — and properly — implement ASLR (see explanation from Nils). Peter Vreugdenhil, the researcher behind the successful IE 8 hack, needed two different vulnerabilities and several exploitation tricks (see paper – pdf) to get it to work. However, because IE is the world’s most widely deployed browser, it will continue to attract the attention of hackers and malware writers. Security doesn’t equate to safety.