Contest Hackers Crack MacBook Air

<a href="http://www.thetechherald.com/article.php/200813/557/CanSecWest-MacBook-Air-first-to-be-PWN-d-and-OWN-d">The Tech Herald</a>

Jim Manico, OWASP Global Board Member

March 28, 2008

1 Min Read

A three-man security team needed just two minutes to hack a MacBook Air -- and took home $10,000 for doing so.The trio -- Charlie Miller, Jake Honoroff and Mark Daniel of Independent Security Evaluators -- played upon a newly discovered vulnerability in the Safari Web browser (v3.1) during the Pwn to Own hacking contest at this week's CanSecWest security conference in Vancouver. The vulnerability will not be made public (the winners signed a nondisclore agreement), though it reportedly might be related to issues recently discovered in Safari's Windows version. Apple, which had just started to ship Safari with an iTunes update to some Windows users, has been made aware of the issue.

The contest, sponsored by TippingPoint, pit three computers against each other: said MacBook Air, a Sony Vaio and the Fujitsu U810. As of press time, the latter two machines had not been compromised.The Tech Herald

About the Author(s)

Jim Manico

OWASP Global Board Member

Jim Manico is a Global Board Member for the OWASP foundation where he helps drive the strategic vision for the organization. OWASP's mission is to make software security visible, so that individuals and organizations worldwide can make informed decisions about true software security risks. OWASP's AppSecUSA<https://2015.appsecusa.org/c/> conferences represent the nonprofit's largest outreach efforts to advance its mission of spreading security knowledge, for more information and to register, see here<https://2015.appsecusa.org/c/?page_id=534>. Jim is also the founder of Manicode Security where he trains software developers on secure coding and security engineering. He has a 18 year history building software as a developer and architect. Jim is a frequent speaker on secure software practices and is a member of the JavaOne rockstar speaker community. He is the author of Iron-Clad Java: Building Secure Web Applications<http://www.amazon.com/Iron-Clad-Java-Building-Secure-Applications/dp/0071835881> from McGraw-Hill and founder of Brakeman Pro. Investor/Advisor for Signal Sciences.

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

You May Also Like


More Insights