Friday, 28 Mar, 2008 Technology
52
votes

A MacBook Gets Hacked in Less Than 2 Minutes

Share

The CanSecWest security conference featured the PWN2OWN (pwn - in hackers language means to take control over a computer) hacking contest, which was about finding out which laptop would get hacked first: a MacBook Air, a Windows Vista based Fujitsu U810 or a Linux based Sony VAIO.

The event consisted of three parts, two of which are already over. The first one was about hacking into a system using networks attacks, i.e. without any user activity needed. The second part of the contest was about using users' actions to hack into the system, i.e. through visiting Web sites or opening e-mail messages. The third part of the contest, which is to be held on Friday, is about using popular third parties' software, like Skype, to hack into the system.

The sponsor of the event - TippingPoint - announced a $20,000 prize for the contest winner. And the hacked laptop too. Yet, since each new day of the contest featured an ease of rules, the prizes for the second and the third days were of $10,000 and $5,000 respectively, plus the right to take the hacked laptop home.

The contestants had to use a previously undisclosed "0day" attack to read the contents of a file on the system.

As the specialists expected, there was hardly anyone to try attacking a system on the first day of the contest, i.e. via network attacks, as such attacks are very rarely used these days. However the second day's contest didn't last even 2 minutes, as Charlie Miller, the first one to hack into an iPhone last year, drove the event organizers to a Web site, which had an exploit code. Miller was the first to attempt an attack on the given systems and the system he attacked didn't stand 2 minutes. Once again.

At the last year's conference the PWN2OWN contest featured a single laptop - a MacBook Pro - which was hacked by Dino Dai Zovi - who used a QuickTime flaw to take control of the laptop.

As soon as the system was hacked, Miller had to sign a nondisclosure agreement, so he was not allowed to discuss the details of the bug until TippingPoint notified the vendor.

According to the contest's rules the participants were only allowed to use vulnerabilities on preinstalled software, which must mean, that Miller took advantage of the Safari browser.

How fast a patch will be released depends on what part of Safari contained the vulnerability - the browser itself or its rendering engine Webkit, which is also used on the Konqueror (Linux default web browser). On the other hand, if it was the Webkit, then why Linux didn't yield to attacks? Or maybe it was the researcher's professionalism that played the crucial role here?

Anyways, according to Aaron Portnoy, a researcher at TippingPoint and one of the contest's judges, Apple's engineers were already working on patching the bug by Thursday night.

As for other systems, Shane Macaulay, last year's co-winner of the contest, spend a lot of time trying to hack into the Vista based laptop. Vista withstood all his attacks. Nothing helped, even an additional file that he rushed back to get from his Vancouver area home.

TippingPoint's Manager of Security Response, Terri Forslof, said that finding a software vulnerability and taking advantage of it making the exploit code work were two different things.

The last day's contest is expected to feature some security researchers, who will attempt to hack into the three laptops via third-party software, like Skype. The organizers don't believe they will be still in possession of the two laptops by the end of the contest.

The fact that a MacBook was the first laptop to be hacked into was absolutely disappointing to the Apple fans, however this might be a sign that both software engineers and the end Mac users should be aware that their system are not so invulnerable.

Powered by www.infoniac.com

Comments:

8 votes

//17 Sep 18, 2019 02:13 PM | posted by: LESLEY VISOSO
I'm recommending  this credible ethical hacker  {QUADHACKED@GMAIL.COM} to younger couples who are sensitive and seeking to be sure that their spouse is actually being real with their intentions . I used to condone an abusive marriage for so long before i got a divorce. The trauma made me stay away from relationship for a long while.
I always had this urge to be sure of the next person i was getting into a relationship with and giving my commitment to. then a friend i met during counselling recommended this amazing hacker {QUADHACKED@GMAIL.COM} to me , he helped me spy on my fiancee at the time, i was  able to see him for who he really was and his intention was made known to me,i cloned his phone and could access all his sms, call logs and whatsapp messages  , he was a pedophile and i was able to find out due to the enormous amount of information revealed when QUADHACKED helped me hack his phone. i was glad i did this because i had two daughters.
for relative hack jobs, hacking of whatsapp, facebook messenger, email hacks, phone spy, phone wire tap, phone clone reach out to him i promise you'll be glad . 
13 votes

//16 Jun 23, 2019 04:48 AM | posted by: Rhenjamin
CHANGE YOUR SCHOOL GRADES
* Change your school grades, within hours of your contact
* Our hacking tools are sophisticated enough to hack in to
into any admin database and breaking through firewalls.
* Our clients safety is our priority and be sure its untraceable
We offer a wide rage of hacking services which includes
Hack University Grades
Hack Database
Increase Credit Score
Hack Mobile phone
Retrieve Documents
Hack Website
Hack Mails and many more.Do you want the service of an expert hacker that is specialized in UNIVERSITY/COLLEGE GRADE CHANGE
CHANGE/UPGRADE CONTACT, STUDENT TRANSFER TRANSCRIPT CHANGE?.
their
Contact: QULIOUSHACKER AT GMAIL DOT COM
13 votes

//15 Jun 23, 2019 04:47 AM | posted by: Mario Joseph
I had thought my fiancée was really faithful until I started hearing rumors that he is seeing his boss at work , I confronted
him and he told me to my face that nothing was happening, it’s just work and nothing else , I wasn’t too pleased with that as a lady so I told me best friend about it and she told me to hack and monitor his WhatsApp, I never knew that was possible. She recommended this hacker to me , so I contacted Nicolas , and he did the job perfectly and truly they were really seeing each other
Thanks so much for saving me.
Nicolas email address CONTACT: QULIOUSHACKER AT GMAIL DOT COM
8 votes

//14 Jun 23, 2019 04:46 AM | posted by: Sam Dailey
+Upgrade University Grades

+Facebook, Whatsapp, Line, Skype Hack, Instagram, Twitter,

+Remove Criminal Records

+Delete unwanted online Pictures and Videos on any website

+Phone hacking, cell phone jammer

+Mastercard, Paypal, Bitcoin, WU, Money Gram with untraceable credit on it etc.

+We also develop custom software and web development in php, java, asp. net etc.

We have 100% records from our client as well as highest repeat hire rate.

our work speak for ourselves, we provide a perfect software solution to all clients.

We believe in mutual growing with client and hence we work as a technology partner and consultant for our clients.contact:QULIOUSHACKER AT GMAIL DOT COM
10 votes

//13 Jun 23, 2019 04:45 AM | posted by: Rohit
Do you need any hacking service? Are you disturbed with unnecessary delays and tricks in your work? then contact at (QULIOUSHACKER AT GMAIL DOT COM) and all your hacking jobs will be done successfully without traces, they are world wide professional group hackers.. Their services are 100% guaranteed so you have nothing to worry about, with their untraceable Penetration software. They offer the following services;
+Bitcoin loading
+University grades changing
+Bank accounts hack
+Erase criminal records hack
+Twitters, email accounts hack
+Grade Changes hack
+Website crashed hack
+server crashed hack.
+Databases hack
+Individual computers hack..
+Control devices remotely hack
+Verified Paypal Accounts hack
+Any social media account hack
+Android & iPhone Hack
+Text message interception hack
+credit card for free online transactions
+Sales of Blank Atm card and Credit card
Contact them at: (QULIOUSHACKER AT GMAIL DOT COM) for more inquiries and you will be happy dealing with them.
12 votes

//12 Jun 23, 2019 04:44 AM | posted by: James Nelson
Do you need any hacking service? Are you disturbed with unnecessary delays and tricks in your work? then contact at (QULIOUSHACKER AT GMAIL DOT COM) and all your hacking jobs will be done successfully without traces, they are world wide professional group hackers.. Their services are 100% guaranteed so you have nothing to worry about, with their untraceable Penetration software. They offer the following services;
+Bitcoin loading
+University grades changing
+Bank accounts hack
+Erase criminal records hack
+Twitters, email accounts hack
+Grade Changes hack
+Website crashed hack
+server crashed hack.
+Databases hack
+Individual computers hack..
+Control devices remotely hack
+Verified Paypal Accounts hack
+Any social media account hack
+Android & iPhone Hack
+Text message interception hack
+credit card for free online transactions
+Sales of Blank Atm card and Credit card
Contact them at: (QULIOUSHACKER AT GMAIL DOT COM) for more inquiries and you will be happy dealing with them.
11 votes

//11 Jun 23, 2019 04:43 AM | posted by: SuhaRik
​IF YOU NEED A GENUINE AND PROFESSIONAL HACKING services KINDLY CONTACT: QULIOUSHACKER AT GMAIL DOT COM
These are professional group of hackers beyond human imaginations... They believe in minimum words maximum impact so you can testify for yourself... they penetrate all websites databases without traces ...Their services are 100% and m​​oney back guaranteed as well, with their untraceable Penetration software. They offer the following services;
-Loading of bitcoin without any upfront
-Unlimited Blank Atm Card and Credit card for 2 years
-Loading Bank account without upfront
-Clears bad Driving
-Tracking Locations of Victims
-We do Crediting of account with credit card no upfront
-SPYWARE FOR ALL SOCIAL MEDIA CONVERSATIONS
-Western Union MTCN and Moneygram hack
-Itune card hacking
-Removal of old credit score
-University grades changing
-Erase criminal records hack
-Facebook hack
-Twitters hack
-email accounts hack
-Grade Changes hack
-Website crashed hack
-server crashed hack
-Skype hack
-Databases hack
-Word Press Blogs hack
-Individual computers hack
-Control devices remotely hack
-Burner Numbers hack
-Verified Paypal Accounts hack
-Any social media account hack
-Android & iPhone Hack
-Text message interception hack
-email interception hack
- credit card for free online transactions
-Untraceable Ip etc.
you will never regret any of their services. Friends i refer you to them trust me they are computer internet gurus..........
We are part of a team consisting of highly efficient developers and hackers.
11 votes

//10 Jun 23, 2019 04:42 AM | posted by: Rohit
SKILLS AND TALENT AT TIMES CAN'T BE DESCRIBE WITH WORDS THAT IS WHY EXPERIENCE OR CONFIRMATION IS BETTER. WE AT REDEMPTION HACKERS CREW, WE DON'T BELIEVE IN TOO MANY WORDS. WE LET OUR JOB SPEAK FOR US.EXCUSE IS NOT AN OPTION, WE CAN FIX ANY HACKING ISSUE ON EARTH, THAT IS WHY OUR SATISFIED CLIENTS CALLS US GOD OF COMPUTER(HACKING).CONTACT US TODAY LET GIVE YOU A PERMANENT SOLUTION TO THAT HACKING ISSUE...
Email:This wornderful
C
O
N
T
A
C
T...QULIOUSHACKER AT GMAIL DOT COM
7 votes

//9 Jun 23, 2019 04:41 AM | posted by: Victor Ear
CHANGE YOUR SCHOOL GRADES
* Change your school grades, within hours of your contact
* Our hacking tools are sophisticated enough to hack in to
into any admin database and breaking through firewalls.
* Our clients safety is our priority and be sure its untraceable
We offer a wide rage of hacking services which includes
Hack University Grades
Hack Database
Increase Credit Score
Hack Mobile phone
Retrieve Documents
Hack Website
Hack Mails and many more.Do you want the service of an expert hacker that is specialized in UNIVERSITY/COLLEGE GRADE CHANGE
CHANGE/UPGRADE CONTACT, STUDENT TRANSFER TRANSCRIPT CHANGE?.
their
Contact: QULIOUSHACKER AT GMAIL DOT COM
20 votes

//8 Mar 18, 2019 12:16 PM | posted by: stacey mann
Are you searching for good hacker, vice hacker no upfront payment and good hacking services,write us for any hacking such as Facebook Hacking, Whatsapp Hacking, Instagram, Mobile Hacking, Increase credit score, removal of name from criminal record, removal of links from website. Recover Your email passwords, Hack into Bank/Company web site, etc,if you have any hacking job contact:spyware103@gmail.com***********NO UPFRONTPAYMENT***
17 votes

//7 Mar 14, 2019 11:58 PM | posted by: Theodore Xavier
I totally wanted an ethical hacker to help me spy on my husband and served as a personal investigator.
Literally, I met him on a dating site and there used to be trust but now, he locks out his WhatsApp, phone cloning. So, I wanted help to bypass her security and test her potency on trust.
I got an hacker who helped me bypass the phone and got it cloned. I get access to activities like Facebook, Email, WhatsApp, calls, Skype and others. I’m sure someone out there is looking for how to solve his relationship problems.
If you ever need help, kindly get in touch with PROLIFICHACKER20@ gmail .com for effective service
16 votes

//6 Mar 14, 2019 11:57 PM | posted by: Theodore Xavier
I totally wanted an ethical hacker to help me spy on my husband and served as a personal investigator.
Literally, I met him on a dating site and there used to be trust but now, he locks out his WhatsApp, phone cloning. So, I wanted help to bypass her security and test her potency on trust.
I got an hacker who helped me bypass the phone and got it cloned. I get access to activities like Facebook, Email, WhatsApp, calls, Skype and others. I’m sure someone out there is looking for how to solve his relationship problems.
If you ever need help, kindly get in touch with PROLIFICHACKER20@ gmail .com for effective service
14 votes

//5 Mar 13, 2019 08:09 PM | posted by: KLOPP CAN
We are the best when it comes to hacking. We pictured the best for you who actually needs our helps, be careful of who you contact to help you, We are special hackers which have is own ways of hacking that know body has ever imagine in this hacking world with my spare idea we can hack anything. We are totally secured and your security comes first. Hacking a website is a job for the professionals
hackers like salves team hackers. A-Change school grade. Bank jobs, flipping cash hack and control any robot.B-database hack. Remove criminal records. facebook hack.C-gmail hack

D-whatsapp hack

E-website hack

F-tracking calls

G-online hacking lectures

H-phone clone

I-online records changes

J-Twitter hack

K-retrival of hacked social media accounts

we are experienced hacker we are at your service we do know mistakes in our jobs, and we make all work successful our work is 100% guarantee.we are here to put smile upon sad faces. contact Us at : SPYWARE103@GMAIL.COM OR WHATSAPP : +12103100003
19 votes

//4 Mar 13, 2019 07:37 PM | posted by: ERIC DIAGLER
WE GUARANTEE SUCCESS TO HELP OUR CLIENTS WORLDWIDE TO
-HACK AND GET USERNAME AND PASSWORD OF ANY SOCIAL MEDIA INCLUDING
-FACEBOOK PASSWORD, TWITTER, INSTAGRAM, IG, YAHOOMAIL, GMAIL, HOTMAIL ETC.
-WE HACK AND RETRIEVE APPLE PHONES PASSWORDS AND IPAD.
-BANK TRANSFER TO ANY ACCOUNT OF YOUR CHOICE IN ANY COUNTRY
-UPGRADE YOUR UNIVERSITY SCORES AND GRADES WITHOUT THE KNOWLEDGE OF THE SCHOOL
-CODE GENERATION TO HACK AND SHOP ONLINE WITH ANY CREDIT CARDS WITHOUT ALERT FROM THE OWNER.
-HACK INTO ANY SERVER DATABASE AND CLEAR CRIMINAL RECORDS.
-HACK BANK ATM CARDS, PIN AND ACCOUNT DETAILS.
-TRACE AND LOCATE ANYBODY IN THE WORLD.
-MONITOR ALL PHONES AND EMAIL ADDRESS.
we provide proofs to satisfy our clients before payment.

contact us at PROLIFICHACKER20@GMAIL.COM

remember to tell your friends about us.
11 votes

//3 Mar 13, 2019 07:16 PM | posted by: Mario Joseph
Are you in search of a reliable Hacking Services? Then We offer the best of hacking service on the web. We are dedicated hacker who have on the job training and our clients comes first. We offer various degree of service 1. School Grades Change 2. Drivers License 3. Provide solutions on professional exams, University and many more 4. Hack email 5. Database hack 6. Facebook, Whatsapp 7. Hack Call Logs, 8. Retrieve messages, deleted data and recovery of messages on cell phone 9. Crediting , Money Transfer and 10. Sales of Dumps, Dead drops and fresh CC We Provide high grades techs and hacking chips and gadgets if you are interested in Spying on anyone. We sell software, apps for hacking service. Interested parties should contact us by herohacker27@gmailcom . Your security is 100% guaranteed
47 votes

//2 Jul 27, 2008 07:17 PM | posted by: snsuresh [InfoMANIAC]
Great
49 votes

//1 Apr 14, 2008 04:58 PM | posted by: snsuresh [InfoMANIAC]
nothing is personal unless there is no hackers

Add your comment:



antispam code




TOP 10 NEWS

Blogs

Archive

Information

Discover, share, comment and discuss with us on a variety of interesting stories. A lot of fascinating things are taking place every day around the globe and we welcome you to this world.