Sunday 12 June 2011

Safari hacked in seconds; IE8 & Firefox fall

Security researcher Charlie Miller has shown how he can hack into a
MacBook notebook in a matter of seconds, via a Safari exploit that
currently remains unaddressed. The demonstration was part of Pwn2Own
2009, a competition in which hackers attempt to break various
platforms in the fastest time possible, taking away both a prize fund
(in Miller's case $10,000) and the machine they hacked.

PWN2OWN is a live hacking contest at which many of the best security
researchers in the world attempt to crack the products you run every
day live for cash prizes. Actually, in this case some of the versions
of products are a little ahead of what you run, just to make it as
challenging as possible.

On a Sony Vaio running Windows 7 the following browsers will be
attacked: IE8, Firefox, Chrome, followed by the Safari and Firefox
browser running on a Mac.

On day 1 of the contest, hackers must attack a default installation
with no added plugins. On day 2 Flash, Java, .Net, and QuickTime are
added and the "attack surface" is much greater. On day 3 popular apps
such as Acrobat Reader are added. For these browser tests, success
means code execution within context of the application.

Success is defined as either "loss of information (user data)" or
"incur financial cost".For his exploits Nils won a cash prize and the
Sony Vaio used in the contest.

No comments:

Post a Comment