Overclock.net › Forums › Industry News › Hardware News › [infoworld] Gone in 2 minutes: Mac gets hacked first in contest
New Posts  All Forums:Forum Nav:

[infoworld] Gone in 2 minutes: Mac gets hacked first in contest

post #1 of 37
Thread Starter 
Quote:
CanSecWest's PWN 2 OWN contest was won in 2 minutes -- after the rules were relaxed a bit -- as Charlie Miller hacked a MacBook Air

It may be the quickest $10,000 Charlie Miller ever earned

He took the first of three laptop computers -- and a $10,000 cash prize -- Thursday after breaking into a MacBook Air at the CanSecWest security conference's PWN 2 OWN hacking contest.

Show organizers offered a Sony Vaio, Fujitsu U810, and the MacBook as prizes, saying that they could be won by anybody at the show who could find a way to hack into each of them and read the contents of a file on the system using a previously undisclosed "0day" attack.

Nobody was able to hack into the systems on the first day of the contest when contestants were only allowed to attack the computers over the network, but on Thursday, the rules were relaxed so that attackers could direct contest organizers using the computers to do things like visit Web sites or open e-mail messages.

Miller, best known as one of the researchers who first hacked Apple's iPhone last year, didn't take much time. Within 2 minutes, he directed the contest's organizers to visit a Web site that contained his exploit code, which then allowed him to seize control of the computer, as about 20 onlookers cheered him on.

He was the first contestant to attempt an attack on any of the systems.

Miller was quickly given a nondisclosure agreement to sign, and he's not allowed to discuss particulars of his bug until the contest's sponsor, TippingPoint, can notify the vendor.

Contest rules state that Miller could only take advantage of software that was preinstalled on the Mac, so the flaw he exploited must have been accessible by, or possibly inside, Apple's Safari browser.

Last year's contest winner, Dino Dai Zovi, exploited a vulnerability in QuickTime to take home the prize.

Dai Zovi, who congratulated Miller after his hack, didn't participate in this year's contest, saying it was time for someone else to win.

Source
post #2 of 37
Where do you even learn to do things like this? O _o" Probably self taught. Amazing though. Congrats to Charlie!
Main
(13 items)
 
  
CPUMotherboardGraphicsRAM
Core i5 3570K ASRock Z77 Pro3 Galaxy 560Ti G.Skills DDR3 
Hard DriveOSMonitorPower
WD Cavier 250GB + SimpleTech 320GB EXHDD Windows 7 x64 Samsung 19" SyncMaster 940BW OCZ 600w GameXStream 
Case
COOLER MASTER Centurion 5 
  hide details  
Reply
Main
(13 items)
 
  
CPUMotherboardGraphicsRAM
Core i5 3570K ASRock Z77 Pro3 Galaxy 560Ti G.Skills DDR3 
Hard DriveOSMonitorPower
WD Cavier 250GB + SimpleTech 320GB EXHDD Windows 7 x64 Samsung 19" SyncMaster 940BW OCZ 600w GameXStream 
Case
COOLER MASTER Centurion 5 
  hide details  
Reply
post #3 of 37
Optimus Prime
(13 items)
 
  
CPUMotherboardGraphicsRAM
Q6600 G0 Gigabyte P35-DS3R eVGA 8800GTS 650/2000 2x2GB G. Skill DDR2 1000 
Hard DriveOptical DriveOSMonitor
7200.10 RAID0 (640GB) Pioneer DVD +/- RW Vista Ultimate x64 Acer 22" WS + 17" LCD 
KeyboardPowerCaseMouse
Logitech G15 Silverstone OP 650 Modified P180 for W/C Razer Death Adder 
Mouse Pad
Razer Mantis Speed 
  hide details  
Reply
Optimus Prime
(13 items)
 
  
CPUMotherboardGraphicsRAM
Q6600 G0 Gigabyte P35-DS3R eVGA 8800GTS 650/2000 2x2GB G. Skill DDR2 1000 
Hard DriveOptical DriveOSMonitor
7200.10 RAID0 (640GB) Pioneer DVD +/- RW Vista Ultimate x64 Acer 22" WS + 17" LCD 
KeyboardPowerCaseMouse
Logitech G15 Silverstone OP 650 Modified P180 for W/C Razer Death Adder 
Mouse Pad
Razer Mantis Speed 
  hide details  
Reply
post #4 of 37
Quote:
Originally Posted by TaiDinh View Post
Where do you even learn to do things like this? O _o" Probably self taught. Amazing though. Congrats to Charlie!
I'd like to know too, it'd be pretty badass to be a white hat hacker.
Magic Man
(13 items)
 
  
CPUMotherboardGraphicsRAM
AMD Athlon x2 3800+ Acer EM61PM Radeon x1650 Qimonda 2x512MB @ 266MHz 
Hard DriveOptical DriveOSMonitor
Western Digital 250GB LG SuperMulti RW x16 Windows XP SP2 Acer x223w 22" 
KeyboardPowerCaseMouse
Generic Lite-On 300W Generic A4 Tech 
Mouse Pad
Generic 
  hide details  
Reply
Magic Man
(13 items)
 
  
CPUMotherboardGraphicsRAM
AMD Athlon x2 3800+ Acer EM61PM Radeon x1650 Qimonda 2x512MB @ 266MHz 
Hard DriveOptical DriveOSMonitor
Western Digital 250GB LG SuperMulti RW x16 Windows XP SP2 Acer x223w 22" 
KeyboardPowerCaseMouse
Generic Lite-On 300W Generic A4 Tech 
Mouse Pad
Generic 
  hide details  
Reply
post #5 of 37
pwned. Thats why I run Linux.
post #6 of 37
Quote:
Originally Posted by Dethredic View Post
pwned. Thats why I run Linux.
Linux isn't bulletproof either.

OSX is also based on UNIX/BSD.
Steel Talon
(16 items)
 
  
CPUMotherboardGraphicsRAM
Core i7 920 @3.62 @ 1.104V MSI X58 Platinum EVGA 690_GTX 24GB Corsair Vengeance 1600 
Hard DriveHard DriveHard DriveHard Drive
2x Seagate 7200.14 3TB RAID 0 Crucial M4 128 Seagate 7200.11 1TB Seagate ST2000 5900 2TB 
Optical DriveOSMonitorKeyboard
2x Samsung SATA DVD/RW Windows 7, Fedora 12 x64, Ubuntu 9.10 (VM) Dell 3008WFP (yeah, the 30") Logitech G15 
PowerCaseMouseMouse Pad
Antec Truepower 650 Thermaltake V9 Black Edition Logitech G700 lol 
  hide details  
Reply
Steel Talon
(16 items)
 
  
CPUMotherboardGraphicsRAM
Core i7 920 @3.62 @ 1.104V MSI X58 Platinum EVGA 690_GTX 24GB Corsair Vengeance 1600 
Hard DriveHard DriveHard DriveHard Drive
2x Seagate 7200.14 3TB RAID 0 Crucial M4 128 Seagate 7200.11 1TB Seagate ST2000 5900 2TB 
Optical DriveOSMonitorKeyboard
2x Samsung SATA DVD/RW Windows 7, Fedora 12 x64, Ubuntu 9.10 (VM) Dell 3008WFP (yeah, the 30") Logitech G15 
PowerCaseMouseMouse Pad
Antec Truepower 650 Thermaltake V9 Black Edition Logitech G700 lol 
  hide details  
Reply
post #7 of 37
Quote:
Originally Posted by Arkanor View Post
Linux isn't bulletproof either.

OSX is also based on UNIX/BSD.
Though they have similarities, they are quite different.

OSX, I believe, more closely resembles FreeBSD. It uses its own Darwin kernel, though.

Linux uses its own Linux kernel.
post #8 of 37
Heh, this is free R&D for Apple. I assume Microshaft does the same thing?

Genius idea (hax convention), especially for some of the more glaring, obvious issues at hand, but also for some of the hacks that people might not always think about.
Burning Phoenix
(13 items)
 
  
CPUMotherboardGraphicsRAM
Intel Q9550 Gigabyte EP45-UD3P eVGA GTX 260 Core 216 SuperClocked 4GB G.Skill DDR2-1000 5-5-5-15 
Hard DriveOptical DriveOSMonitor
3 WD 80GB RAID0, Seagate 500GB, WD 1TB Caviar BLCK Lite-On LH-20A1S Windoze 7 Professional Dual Dell E207WFP 20.1" Widescreen LCD's 
KeyboardPowerCaseMouse
Logitech G15 Silverstone OP750 Lian-Li PC-A10B Logitech G5 
Mouse Pad
Harley Davidson 
  hide details  
Reply
Burning Phoenix
(13 items)
 
  
CPUMotherboardGraphicsRAM
Intel Q9550 Gigabyte EP45-UD3P eVGA GTX 260 Core 216 SuperClocked 4GB G.Skill DDR2-1000 5-5-5-15 
Hard DriveOptical DriveOSMonitor
3 WD 80GB RAID0, Seagate 500GB, WD 1TB Caviar BLCK Lite-On LH-20A1S Windoze 7 Professional Dual Dell E207WFP 20.1" Widescreen LCD's 
KeyboardPowerCaseMouse
Logitech G15 Silverstone OP750 Lian-Li PC-A10B Logitech G5 
Mouse Pad
Harley Davidson 
  hide details  
Reply
post #9 of 37
Quote:
Originally Posted by The Hundred Gunner View Post
Though they have similarities, they are quite different.

OSX, I believe, more closely resembles FreeBSD. It uses its own Darwin kernel, though.

Linux uses its own Linux kernel.
Right, the two forked pretty far back up the UNIX tree if I recall correctly. That said, I much prefer FOSS software.
SUGO Reborn
(8 items)
 
   
CPUMotherboardGraphicsRAM
Intel i7-2620M @ 2.7 GHz Sony laptop AMD Radeon HD 6630m + Intel HD Graphics (hybrid) 6 GB DDR3 
Hard DriveOptical DriveOSMonitor
Crucial M4 SSD 16x DVD+/-RW SuperDrive Windows 7 Professional x64 13.3" (1366x768) 
KeyboardPowerCaseMouse
Chiclet keyboard Sony laptop charger Black plastic Trackpad 
  hide details  
Reply
SUGO Reborn
(8 items)
 
   
CPUMotherboardGraphicsRAM
Intel i7-2620M @ 2.7 GHz Sony laptop AMD Radeon HD 6630m + Intel HD Graphics (hybrid) 6 GB DDR3 
Hard DriveOptical DriveOSMonitor
Crucial M4 SSD 16x DVD+/-RW SuperDrive Windows 7 Professional x64 13.3" (1366x768) 
KeyboardPowerCaseMouse
Chiclet keyboard Sony laptop charger Black plastic Trackpad 
  hide details  
Reply
post #10 of 37
this is already posted

http://www.overclock.net/software-ne...-own-over.html
   
CPUMotherboardGraphicsRAM
AMD Phenom II X6 1090T Black Edition Thuban 3.2...  Gigabyte MB Model : GA-890FXA-UD5, NB : AMD 89... Radeon HD 6850 1GB 256-bit GDDR5 775MHz 960 SPU... G.SKILL Sniper 8GB (2 x 4GB) 240-Pin DDR3 SDRAM... 
Hard DriveOptical DriveCoolingOS
SAMSUNG EcoGreen F4 HD204UI 2TB 32MB Cache SATA... LG WH10LS30 10X Blu-ray Burner - LightScribe Su... XIGMATEK LOKI SD963 92mm HYPRO Bearing CPU Cooler  Windows 7 Ultimate 
MonitorMonitorMonitorKeyboard
Hanns-G 28'' 3ms Full HD 1080P 1920 x 1200LCD M... Samsung 19" 1440x900 Envision 22" 1680x1050 RAZER Lycosa Black USB Wired Gaming Keyboard 
PowerCaseMouseMouse Pad
TOPOWER Galaxis MX Series GAPS-500MX 500W ATX12... COOLER MASTER Storm Scout RAZER DeathAdder Precision Optical Gaming Mouse... RocketFish (Speed+Control) 
Audio
Altec Lansing VS4221 2.1 35 Watts Three-Piece C... 
  hide details  
Reply
   
CPUMotherboardGraphicsRAM
AMD Phenom II X6 1090T Black Edition Thuban 3.2...  Gigabyte MB Model : GA-890FXA-UD5, NB : AMD 89... Radeon HD 6850 1GB 256-bit GDDR5 775MHz 960 SPU... G.SKILL Sniper 8GB (2 x 4GB) 240-Pin DDR3 SDRAM... 
Hard DriveOptical DriveCoolingOS
SAMSUNG EcoGreen F4 HD204UI 2TB 32MB Cache SATA... LG WH10LS30 10X Blu-ray Burner - LightScribe Su... XIGMATEK LOKI SD963 92mm HYPRO Bearing CPU Cooler  Windows 7 Ultimate 
MonitorMonitorMonitorKeyboard
Hanns-G 28'' 3ms Full HD 1080P 1920 x 1200LCD M... Samsung 19" 1440x900 Envision 22" 1680x1050 RAZER Lycosa Black USB Wired Gaming Keyboard 
PowerCaseMouseMouse Pad
TOPOWER Galaxis MX Series GAPS-500MX 500W ATX12... COOLER MASTER Storm Scout RAZER DeathAdder Precision Optical Gaming Mouse... RocketFish (Speed+Control) 
Audio
Altec Lansing VS4221 2.1 35 Watts Three-Piece C... 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Hardware News
Overclock.net › Forums › Industry News › Hardware News › [infoworld] Gone in 2 minutes: Mac gets hacked first in contest