Thursday, March 19, 2009

MacBook And Safari Fall First Yet Again

Charlie Miller made headlines last year at Pwn2Own when he hacked his way into the winners circle by hacking a MacBook in just under 2mins. Last years feet seemed nothing short of amazing, so imagine the surprise when he backed his results with an even more impressive time. This year hacking a full updated MacBook in mere seconds, yes seconds.

Utilizing an exploit in Apple's Safari web browser Miller was able to trick officials into visiting a link which allowed him to gain control of the MacBook.

“It took a couple of seconds. They clicked on the link and I took control of the machine,” Miller said moments after his accomplishment.

As usual with the contest the technical details of the vulnerability will not be released until a patch is ready and all contestants are required to sign NDA's so its uncertain exactly what and how he did it. But it was likely a know vulnerability that he had been working on.

The second machine to fall this year was a Sony Vaio machine equipped with Windows 7 and the recently released IE 8 browser. By the end of day one FireFox, IE8 and Safari had all three been breached with Google's Chrome being the only browser still standing.

For more detils checkout the TrippingPoint Blog

No comments:

Post a Comment

All comments will be moderate for content, please be patient as your comment will appear as soon as it has been reviewed.

Thank you