In a hacking contest pitting a Macbook Air laptop loaded with OSX 10.5.2, a Sony Laptop living with Vista Ultimate SP1 inside, or a Linux box running Ubuntu 7.10, the Mac platfokrm was hacked within 2 minutes by one of the researchers who discovered a vulnerability in iPhone last year .
Charlie Miller took only two minutes (although some say 30 seconds) to hack the mack by directing the laptop browser, Safari, to a compromised website which then gave him access to the laptop; the move was similar to a phishing attack and Apple has already been notified by the sponsor of the event, Intrusion detection specialist Tipping Point.
The Pwn2Own challenge, which comes with a $10,000 reward attached, took place in Vancouver, Canada during the CanSecWest which is marketed as the "world's most advanced conference focusing on applied digital security [and] is about bringing the industry luminaries together in a relaxed environment which promotes collaboration and social networking"
All the laptops were patched and in typical client configurations with typical user configurations according to CanSecWest's website and the instructions on how to claim the reward were actually left in the laptops.
No comments:
Post a Comment